Data Protection Policy

1. Introduction

TRS Design Agency Ltd ("the Company") is committed to protecting the privacy and security of personal data. This Data Protection Policy outlines how the Company collects, processes, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Purpose

The purpose of this policy is to ensure that the Company:

Complies with data protection laws and follows good practice.
Protects the rights of clients, employees, and other stakeholders.
Is transparent about how it stores and processes personal data.
Protects itself from data security risks such as breaches.

3. Scope

This policy applies to all personal data processed by the Company, including data relating to clients, employees, contractors, and any other individuals. It covers all activities related to web design and web development services provided by the Company.

4. Data Collection

The Company collects personal data relevant to the services provided. This includes but is not limited to:

Client contact details (name, email address, phone number, etc.).
Website login details for development purposes (where applicable).
Payment information.
Any other data necessary for the provision of web design and development services.

5. Data Use

The Company uses personal data for the following purposes:

Delivering web design and development services.
Communicating with clients regarding project updates, billing, and support.
Managing client accounts and contracts.
Ensuring the security and functionality of client websites.

6. Data Storage and Retention

The Company stores personal data securely using appropriate technical and organisational measures.

Personal data will only be retained for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

7. Data Sharing

The Company does not sell, rent, or otherwise share personal data with third parties, except where required to:

Work with trusted third-party service providers (e.g. hosting providers, payment processors).
Comply with legal obligations.

8. Data Subject Rights

Individuals have the following rights regarding their personal data:

The right to access their personal data.
The right to rectify inaccurate or incomplete data.
The right to erasure of data (where applicable).
The right to restrict or object to the processing of their data.
The right to data portability.

To exercise these rights, individuals should contact info@trsdesign.com.

9. Data Breach Policy

In the event of a data breach, the Company will take immediate steps to contain the breach, assess its impact, and notify the Information Commissioner’s Office (ICO) and affected individuals where necessary, in line with legal requirements.

10. Responsibilities

All employees, contractors, and third-party providers of the Company must comply with this policy.

The Company’s Data Protection Officer (DPO) or designated personnel are responsible for monitoring compliance with this policy.

11. Changes to the Policy

This policy may be updated from time to time to reflect legal or operational changes. The Company will notify clients and other stakeholders of any significant changes.

Effective Date: 29/07/2024

Contact Information:

For any data protection queries or concerns, please contact info@trsdesign.com.