How we handle personal data as a controller and processor under the UK GDPR.
- Head of Technology
- Annually
Our commitment
We collect the least personal data we need, use it only for the purpose we collected it for, keep it secure, and delete it when it is no longer needed. Equity House Group Limited is the data controller for personal data collected through this website.
Principles we apply
- Lawfulness, fairness and transparency in every collection
- Purpose limitation and data minimisation by default
- Accuracy, with a route for people to correct their data
- Storage limitation, with documented retention periods
- Integrity and confidentiality through technical and organisational measures
- Accountability, evidenced by our records of processing
Individual rights
People can request access, rectification, erasure, restriction, portability, and can object to processing. Requests go to contact@equityhouse.io and are answered within one month.
Breaches
Any suspected personal data breach must be reported internally immediately. Reportable breaches are notified to the ICO within 72 hours, and to affected individuals where the risk to them is high.
Related
Our public-facing privacy policy and cookie policy explain in detail what we collect from website visitors and how consent is managed.
Governance and review
This policy is owned by the Head of Technology and approved by the board. It is reviewed at least annually, and sooner if the law, our operations or our risk profile changes.