Introduction

Abercorn Limited trading as CompanyValuation.Co ("we," "us," "our") is committed to ensuring the privacy and protection of personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679. This GDPR policy outlines our approach to data protection and the rights of individuals in relation to their personal data.

1. Data Protection Principles

We adhere to the following principles when processing personal data:

• Lawfulness, Fairness, and Transparency: Personal data shall be processed lawfully, fairly, and in a transparent manner.
• Purpose Limitation: Data shall be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
• Data Minimization: Data collected shall be adequate, relevant, and limited to what is necessary for the intended purpose.
• Accuracy: Personal data shall be accurate and kept up to date. Inaccurate data will be corrected or erased without delay.
• Storage Limitation: Personal data shall be kept in a form that permits identification of data subjects for no longer than necessary for the purposes for which the data is processed.
• Integrity and Confidentiality: Personal data shall be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage.

2. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contractual Necessity: Processing is necessary for the performance of a contract to which the data subject is a party.
• Legal Obligation: Processing is necessary for compliance with a legal obligation.
• Legitimate Interests: Processing is necessary for our legitimate interests, provided those interests are not overridden by the data subject's rights.
• Consent: In certain cases, we may rely on the consent of the data subject to process their personal data. Consent must be freely given, specific, informed, and unambiguous.

3. Data Subject Rights

Under GDPR, individuals have the following rights concerning their personal data:

• Right to be Informed: Individuals have the right to be informed about the collection and use of their personal data.
• Right of Access: Individuals have the right to access their personal data and obtain a copy.
• Right to Rectification: Individuals have the right to request the correction of inaccurate personal data.
• Right to Erasure: Individuals have the right to request the deletion of their personal data ("right to be forgotten") in certain circumstances.
• Right to Restrict Processing: Individuals have the right to request the restriction or suppression of their personal data in specific situations.
• Right to Data Portability: Individuals have the right to obtain and reuse their personal data across different services.
• Right to Object: Individuals have the right to object to the processing of their personal data based on legitimate interests or for direct marketing purposes.
• Rights Related to Automated Decision-Making: Individuals have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

4. Data Security

We implement appropriate technical and organizational measures to ensure the security of personal data, including encryption, access controls, and regular security assessments. We also ensure that our staff members are trained on data protection and understand their responsibilities under GDPR.

5. Data Breach Notification

In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the Information Commissioner’s Office (ICO) within 72 hours. If the breach poses a high risk to individuals, we will also inform the affected individuals without undue delay.

6. Data Transfers

Where we transfer personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as standard contractual clauses or binding corporate rules, to protect the data in accordance with GDPR requirements.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods are determined based on the nature of the data and the legal obligations we are subject to.

8. Contact and Complaints

For any questions, concerns, or requests regarding this GDPR policy or the processing of your personal data, please contact our Data Protection Officer at dpm@AbercornBusinessSales.com.

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.

9. Updates to this Policy

We may update this GDPR policy from time to time to reflect changes in legal requirements or our processing practices. Any updates will be posted on our website.

Contact Us

For any questions or further information about this Privacy Policy, please email us at dpm@AbercornBusinessSales.com or write to us at Customer Relations Officer, Abercorn Limited, Savoy House, Savoy Circus, London W3 7DA.

© Abercorn Limited trading as CompanyValuation.Co. All Rights Reserved.