Data Protection Policy

Purpose
The purpose of this policy is to outline how Record and Entry (R&E) Outsourcing protects personal data, ensures compliance with applicable data protection laws, and upholds the rights and privacy of individuals whose data we process. This policy supports the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Commitment to Data Protection

R&E Outsourcing is committed to handling all personal data responsibly, lawfully, and transparently. We collect, process, store, and share personal data only when necessary for legitimate business purposes and in compliance with applicable laws.

2. Scope

This policy applies to:

• All employees, contractors, and consultants.

• All personal data processed by R&E Outsourcing is processed whether in digital or paper format.

• All services are provided, including Outsourcing, Training, Consulting, and Recruiting.

3. Legal Basis for Processing

We process personal data based on at least one of the following lawful grounds:

• Consent of the data subject.

• Performance of a contract.

• Compliance with a legal obligation.

• Legitimate business interests, provided they do not override the rights of the data subject.

4. Data Collection and Use

We may collect and use personal data for purposes including:

• Delivering outsourcing, training, consulting, and recruiting services.

• Managing client relationships and communications.

• Meeting regulatory compliance obligations.

• Improving our website, services, and client experience.

5. Data Minimisation and Accuracy

We only collect personal data that is relevant, necessary, and proportionate to the purpose for which it is processed. We take reasonable steps to ensure all personal data is accurate and kept up to date.

6. Data Storage and Security

• Personal data is stored securely with appropriate technical and organisational measures to protect against unauthorised access, alteration, disclosure, or destruction.

• We implement encryption, access controls, secure backups, and staff training to safeguard data.

7. Data Sharing and Transfers

• We only share personal data with third parties where necessary for service delivery, legal compliance, or contractual obligations.

• When transferring data outside the UK, we ensure appropriate safeguards are in place by UK GDPR requirements.

8. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law.

9. Individual Rights

Individuals have the following rights under UK GDPR:

• Right to be informed about the collection and use of their data.

• Right of access to their data.

• Right to rectification of inaccurate or incomplete data.

• Right to erasure (“right to be forgotten”).

• Right to restrict processing.

• Right to data portability.

• Right to object to processing.

• Rights about automated decision-making and profiling.

Requests to exercise these rights should be made in writing to our Data Protection Contact (details below).

10. Data Breaches

In the event of a personal data breach, we will:

• Contain and assess the breach.

• Notify the Information Commissioner’s Office (ICO) within 72 hours, if required.

• Notify affected individuals where necessary.

• Take corrective action to prevent recurrence.

11. Privacy Policy

Our Privacy Policy is available on our website and explains how R&E Outsourcing operates. It encourages visitors to review our services, including Outsourcing, Training, Consulting, and Recruiting.

Record and Entry (R&E) Outsourcing
Website: www.recordandentry.com
Email: info@recordandentry.com
Telephone: +44 208 145 3355
Address: Ability House, 121 Brooker Road, Waltham Abbey, Essex, EN9 1JH, United Kingdom
Owned and operated by: Outsource Professional Directors (OPD) Limited
Director: Sarah Santeng
Responsible for Policies and Statements: Sarah Santeng