Our commitment
XDR Partners Ltd is committed to protecting the personal data of the people we deal with — enquirers, clients, candidates and contacts — in line with the UK GDPR and the Data Protection Act 2018. This policy sets out the principles we follow and how we meet our obligations as a data controller. It sits alongside our Privacy Policy, which describes what this website collects.
The principles we follow
We process personal data in accordance with the data protection principles. Personal data is:
- processed lawfully, fairly and transparently;
- collected for specified, explicit and legitimate purposes and not used in a way incompatible with those purposes;
- adequate, relevant and limited to what is necessary;
- accurate and, where necessary, kept up to date;
- kept no longer than necessary; and
- processed securely, with appropriate technical and organisational measures.
Lawful bases we rely on
- Consent — for example, analytics cookies on this website.
- Legitimate interests — to respond to enquiries, deliver our services, and run and develop our business, where this is not overridden by your rights.
- Contract — where we are taking steps to enter into, or perform, a contract with you.
- Legal obligation — where we must process data to comply with the law.
Your rights
You have the right to be informed, and rights of access, rectification, erasure, restriction, portability and objection, as well as rights relating to automated decision-making. Where we rely on consent, you may withdraw it at any time. To exercise any right, email enquiries@xdrpartners.com; we will respond within one month.
Data security & breaches
We apply appropriate measures to protect personal data against loss, misuse or unauthorised access. Where a personal data breach is likely to result in a risk to people’s rights and freedoms, we will report it to the Information Commissioner’s Office (ICO) without undue delay and, where required, notify those affected.
International transfers
Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards recognised under UK data protection law.
Retention
We keep personal data only as long as necessary for the purpose for which it was collected and to meet our legal and business-record obligations, after which it is securely deleted.
How to contact us or complain
For any data protection matter, email enquiries@xdrpartners.com. You also have the right to complain to the ICO at ico.org.uk.