Privacy Policy

Note for Darren
 

As mentioned in the contract, I do not write legal policies, so this section will need to be completed by you using the information that applies to how DTAC actually handles personal data.

I can help structure the page and make sure it is presented clearly on the website, but the wording itself should reflect your own processes. If you are unsure about anything, please consult a solicitor or another suitably qualified professional.
 

As a general guide, the ICO says a privacy notice will usually need to explain things such as:

​

​

• who DTAC is and how people can contact you

• what personal information you collect

• how you collect that information, including if any information comes from other sources

• why you collect and use personal information

• the lawful basis you rely on for using it

• who information may be shared with

• whether information is transferred outside the UK, where relevant

• how long personal information is kept

• what rights people have over their information

• how someone can withdraw consent where consent is being used

• how someone can raise a concern or complain, including their right to contact the ICO

• whether you use any automated decision making or profiling, if relevant

• how cookies and website tracking are used
   

The ICO also recommends keeping privacy information clear, easy to understand and accessible, rather than filling it with legal language for the sake of it. Their current guidance is under review following changes from the Data (Use and Access) Act, so it is worth checking the latest ICO guidance when the final policy is prepared.