Crockwash Quality Data Protection Policy

1. Purpose

At Crockwash, we are committed to protecting the personal data and privacy of our

customers, employees, and partners. This Quality Data Protection Policy outlines our

approach to managing personal data in compliance with applicable data protection laws,

including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

2018.

2. Scope

This policy applies to all employees, contractors, and third-party service providers of

Crockwash involved in the handling of personal data related to our operations, including the

supply and installation of commercial catering equipment throughout the UK.

3. Policy Statement

Crockwash is dedicated to ensuring the highest standards of data protection and privacy.

We will achieve this by:

– Implementing data protection principles to ensure that personal data is processed lawfully,

fairly, and transparently.

– Collecting and processing only the personal data that is necessary for specific, legitimate

purposes.

– Maintaining accurate and up-to-date personal data, and ensuring that individuals’ rights

regarding their data are respected.

– Implementing appropriate technical and organizational measures to safeguard personal

data from unauthorized access, loss, or destruction.

4. Data Protection Principles

Crockwash adheres to the following data protection principles:

1. Lawfulness, Fairness, and Transparency: Personal data will be processed legally and fairly,

and individuals will be informed about how their data is used.

2. Purpose Limitation: Personal data will be collected for specified, legitimate purposes and

not processed in a manner incompatible with those purposes.

3. Data Minimization: Personal data collected will be adequate, relevant, and limited to

what is necessary for the purposes for which it is processed.

4. Accuracy: Personal data will be kept accurate and, where necessary, updated to ensure

that it is accurate and complete.5. Storage Limitation: Personal data will be retained only for as long as necessary to fulfill

the purposes for which it was collected.

6. Integrity and Confidentiality: Personal data will be processed in a manner that ensures

appropriate security and confidentiality.

5. Responsibilities

– Management: Senior management is responsible for ensuring compliance with this policy

and for providing the necessary resources to implement effective data protection measures.

– Data Protection Officer (DPO): Andrew Todd-wood is appointed as the Data Protection

Officer, responsible for overseeing data protection compliance, providing guidance to

employees, and acting as a point of contact for data subjects and regulatory authorities.

– Employees: All employees are responsible for adhering to this policy and ensuring that

personal data is handled in accordance with data protection laws and best practices.

Employees are encouraged to report any data protection concerns or breaches promptly.

6. Data Subject Rights

Crockwash acknowledges the rights of individuals regarding their personal data, including:

– The right to access their personal data.

– The right to rectify inaccurate or incomplete data.

– The right to erase personal data under certain circumstances.

– The right to restrict processing.

– The right to data portability.

– The right to object to processing.

We will ensure that mechanisms are in place to facilitate the exercise of these rights.

7. Data Breach Response

In the event of a data breach, Crockwash will follow a defined incident response plan to

assess the breach, notify affected individuals where necessary, and report to the

Information Commissioner’s Office (ICO) in accordance with legal requirements.

8. Training and Awareness

Crockwash will provide regular training to employees on data protection principles, policies,

and best practices to ensure a culture of data protection awareness throughout the

organization.

9. Monitoring and ReviewWe will regularly review and update this policy to ensure its effectiveness and compliance

with applicable data protection laws. Feedback from employees and stakeholders will be

considered in these reviews.

10. Conclusion

Crockwash is committed to protecting personal data and ensuring compliance with data

protection laws. By adhering to this Quality Data Protection Policy, we aim to build trust

with our customers, employees, and partners while safeguarding their personal

information.

For any questions or further information regarding our Quality Data Protection Policy,

please contact info@crockwash.com