Our lawful basis for processing personal data

We must have a valid lawful basis in order to process personal data. Throughout processing we uphold data protection principles of lawfulness, fairness and transparency. Also ensuring that processing remains within the confines of the purpose for collection, as well as making sure data is relevant, limited, accurate, and retained only for a specified period. Finally, we strive to maintain data integrity and confidentiality.

Our lawful basis for processing personal data:

  • Consent – You provide us with consent.
  • Contract – We enter into a contract with you – this includes precontractual processing.
  • Legal obligation – In scenarios where we have to comply with other laws.
  • Vital interests – To safeguard your life or the life of someone else connected to you.
  • Legitimate interest – Where we are pursuing the legitimate interest of the business – however, our legitimate interest cannot override yours.

Our lawful basis for processing special category data:

  • Explicit consent – You provide us with explicit consent.
  • Employment and social protection – We enter into a contract with you – this includes precontractual processing.
  • Vital interests – To safeguard your life or the life of someone else connected to you.
  • Legitimate interest – Where we are pursuing the legitimate interest of the business – however, our legitimate interest cannot override yours.
  • Where you make information public – for example on social media.
  • When we have to mount or defend a legal challenge.
  • Provision of health and social care.