|
This is a statement of data protection policy adopted by Bright Angels.
Bright Angels needs to collect and use certain types of personal information on, for example, current, past and prospective employees, suppliers, clients/customers, and others with whom it communicates.
In addition, it may occasionally be required by statute to collect and use certain types of information to comply with the requirements of government departments.
This personal information must be dealt with properly irrespective of how it is collected, recorded, used and disposed of - whether on paper, in a computer, or recorded on other material - and there are safeguards to ensure this in the Data Protection Act 1998
We regard the lawful and correct treatment of personal information as critical to successful operations, and to maintaining clients’ confidence in us.
To maintain our reputation and integrity as an open and professional organisation we need to be fully compliant with this legislation.
To this end we fully endorse and adhere to the principles of data protection, as enumerated in the Data Protection Act 1998 and will:-
- Observe fully conditions regarding the fair collection and use of information
- Meet our legal obligations to specify the purposes for which information is used;
- Collect and process appropriate information only to the extent that it is needed to fulfill operational needs or to comply with any legal requirements
- Ensure the accuracy of information used
- Apply strict checks to determine the length of time information is held
- Ensure that the rights of people about whom information is held can be fully exercised under the Act
- Take appropriate technical and organisational security measures to safeguard personal information
- Ensure that personal information is not transferred abroad without suitable safeguards.
In addition, we will ensure that:
- There is someone with specific responsibility for data protection in the organisation. Currently, the nominated person is Kassia Gardner, Tel: 07528 649953
- Everyone managing and handling personal information understands that they are responsible for following good data protection practice;
- Everyone managing and handling personal information is appropriately supervised and trained to do so
- Anybody wanting to make enquiries about handling personal information knows what to do
- Queries about handling personal information are promptly and courteously dealt with
- Methods of handling personal information are clearly described
- A regular review and audit is made of the way personal information is managed
- Methods of handling personal information are regularly assessed and evaluated
- Performance in the handling of personal information is regularly assessed and evaluated.
|
