<?php
// Enhanced security headers
header('Strict-Transport-Security: max-age=31536000; includeSubDomains');

$page_title = "GDPR Compliance | UK Data Services - Data Protection Excellence";
$page_description = "Learn about UK Data Services' comprehensive GDPR compliance framework and commitment to protecting personal data in all our web scraping and analytics services.";
$canonical_url = "https://ukdataservices.co.uk/gdpr-compliance";
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title><?php echo htmlspecialchars($page_title); ?></title>
    <meta name="description" content="<?php echo htmlspecialchars($page_description); ?>">
    <meta name="keywords" content="GDPR compliance, data protection, UK data law, privacy rights, data security">
    <meta name="author" content="UK Data Services">
    <meta name="robots" content="index, follow">
    <link rel="canonical" href="<?php echo htmlspecialchars($canonical_url); ?>">

    <!-- Open Graph / Facebook -->
    <meta property="og:type" content="website">
    <meta property="og:url" content="<?php echo htmlspecialchars($canonical_url); ?>">
    <meta property="og:title" content="<?php echo htmlspecialchars($page_title); ?>">
    <meta property="og:description" content="<?php echo htmlspecialchars($page_description); ?>">
    <meta property="og:image" content="https://ukdataservices.co.uk/assets/images/ukds-og-image.png">
    <meta property="og:site_name" content="UK Data Services">

    <!-- Twitter -->
    <meta name="twitter:card" content="summary_large_image">
    <meta name="twitter:url" content="<?php echo htmlspecialchars($canonical_url); ?>">
    <meta name="twitter:title" content="<?php echo htmlspecialchars($page_title); ?>">
    <meta name="twitter:description" content="<?php echo htmlspecialchars($page_description); ?>">
    <meta name="twitter:image" content="https://ukdataservices.co.uk/assets/images/ukds-og-image.png">

    <!-- Favicon -->
    <link rel="icon" type="image/svg+xml" href="assets/images/favicon.svg">
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Roboto+Slab:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Lato:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap" rel="stylesheet">
    <link rel="stylesheet" href="assets/css/main.css?v=20260222">
    
    <style>
        .legal-content {
            max-width: 800px;
            margin: 0 auto;
            padding: 40px 20px;
            line-height: 1.6;
        }
        
        .legal-content h1 {
            color: #144784;
            margin-bottom: 20px;
            text-align: center;
        }
        
        .legal-content h2 {
            color: #179e83;
            margin-top: 40px;
            margin-bottom: 20px;
            border-bottom: 2px solid #179e83;
            padding-bottom: 10px;
        }
        
        .legal-content h3 {
            color: #144784;
            margin-top: 30px;
            margin-bottom: 15px;
        }
        
        .legal-content p, .legal-content li {
            margin-bottom: 15px;
            color: #444;
        }
        
        .legal-content ul {
            margin-left: 20px;
        }
        
        .compliance-highlight {
            background: #ffffff;
            color: #1a1a1a;
            padding: 30px;
            border-radius: 12px;
            margin: 30px 0;
            text-align: center;
            border: 3px solid #179e83;
            box-shadow: 0 4px 20px rgba(23, 158, 131, 0.1);
        }
        
        .compliance-highlight h3 {
            color: #144784;
            margin-bottom: 15px;
            font-weight: 600;
        }
        
        .rights-grid {
            display: grid;
            grid-template-columns: repeat(auto-fit, minmax(250px, 1fr));
            gap: 20px;
            margin: 30px 0;
        }
        
        .rights-card {
            background: #f8f9fa;
            padding: 20px;
            border-radius: 8px;
            border-left: 4px solid #179e83;
        }
        
        .rights-card h4 {
            color: #144784;
            margin-bottom: 10px;
        }
        
        .contact-info {
            background: #f8f9fa;
            padding: 20px;
            border-radius: 8px;
            margin: 30px 0;
        }
        
        .last-updated {
            text-align: center;
            font-style: italic;
            color: #666;
            margin-bottom: 30px;
        }
    </style>
</head>
<body>
    <!-- Navigation -->
    <?php include($_SERVER["DOCUMENT_ROOT"] . "/includes/nav.php"); ?>

    <main class="legal-content">
        <h1>GDPR Compliance</h1>
        <p class="last-updated">Last Updated: <?php echo date('jS F Y'); ?></p>

        <div class="compliance-highlight">
            <h3>🛡️ Data Protection Excellence</h3>
            <p>UK Data Services is fully compliant with the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018. We prioritise data protection in all our web scraping and analytics services.</p>
        </div>

        <h2>1. Our GDPR Commitment</h2>
        <p>As a leading UK data services provider, we have implemented comprehensive GDPR compliance measures across all our operations:</p>
        <ul>
            <li>Full compliance with GDPR and UK data protection legislation</li>
            <li>Transparent data processing practices</li>
            <li>Robust security measures and access controls</li>
            <li>Regular compliance audits and staff training</li>
            <li>Clear procedures for data subject rights</li>
            <li>Comprehensive data protection impact assessments</li>
        </ul>

        <h2>2. Data Protection Principles</h2>
        <p>We adhere to all six GDPR data protection principles:</p>

        <h3>Lawfulness, Fairness and Transparency</h3>
        <ul>
            <li>All data processing has a clear legal basis</li>
            <li>Transparent communication about data use</li>
            <li>Fair processing that respects individual rights</li>
        </ul>

        <h3>Purpose Limitation</h3>
        <ul>
            <li>Data collected for specific, explicit purposes</li>
            <li>No processing beyond the original purpose</li>
            <li>Clear project scope and data requirements</li>
        </ul>

        <h3>Data Minimisation</h3>
        <ul>
            <li>Only collect data that's necessary for the purpose</li>
            <li>Regular review of data collection practices</li>
            <li>Efficient data processing methods</li>
        </ul>

        <h3>Accuracy</h3>
        <ul>
            <li>Maintain accurate and up-to-date records</li>
            <li>Correct inaccurate data promptly</li>
            <li>Regular data quality assessments</li>
        </ul>

        <h3>Storage Limitation</h3>
        <ul>
            <li>Retain data only as long as necessary</li>
            <li>Clear data retention schedules</li>
            <li>Secure data disposal procedures</li>
        </ul>

        <h3>Integrity and Confidentiality</h3>
        <ul>
            <li>Robust security measures and encryption</li>
            <li>Access controls and authentication</li>
            <li>Regular security audits and updates</li>
        </ul>

        <h2>3. Your Data Protection Rights</h2>
        <p>Under GDPR, you have comprehensive rights regarding your personal data:</p>

        <div class="rights-grid">
            <div class="rights-card">
                <h4>Right to be Informed</h4>
                <p>Clear information about how we process your personal data, provided through our privacy policy and direct communications.</p>
            </div>
            
            <div class="rights-card">
                <h4>Right of Access</h4>
                <p>Request copies of your personal data and information about how we process it. We respond within one month.</p>
            </div>
            
            <div class="rights-card">
                <h4>Right to Rectification</h4>
                <p>Have inaccurate or incomplete personal data corrected or completed without undue delay.</p>
            </div>
            
            <div class="rights-card">
                <h4>Right to Erasure</h4>
                <p>Request deletion of your personal data in certain circumstances, including withdrawal of consent.</p>
            </div>
            
            <div class="rights-card">
                <h4>Right to Restrict Processing</h4>
                <p>Request that we limit how we process your personal data in specific situations.</p>
            </div>
            
            <div class="rights-card">
                <h4>Right to Data Portability</h4>
                <p>Receive your personal data in a structured, machine-readable format for transfer to another controller.</p>
            </div>
            
            <div class="rights-card">
                <h4>Right to Object</h4>
                <p>Object to processing based on legitimate interests, direct marketing, or research purposes.</p>
            </div>
            
            <div class="rights-card">
                <h4>Rights Related to Automated Processing</h4>
                <p>Protection against automated decision-making and profiling that produces legal or significant effects.</p>
            </div>
        </div>

        <h2>4. Legal Basis for Processing</h2>
        <p>We only process personal data when we have a valid legal basis:</p>

        <h3>Contractual Necessity</h3>
        <ul>
            <li>Performance of contracts for data services</li>
            <li>Pre-contractual measures and quotations</li>
            <li>Service delivery and project management</li>
        </ul>

        <h3>Legitimate Interest</h3>
        <ul>
            <li>Business operations and administration</li>
            <li>Service improvement and development</li>
            <li>Security and fraud prevention</li>
        </ul>

        <h3>Consent</h3>
        <ul>
            <li>Marketing communications</li>
            <li>Optional data processing activities</li>
            <li>Cookie usage beyond essential cookies</li>
        </ul>

        <h3>Legal Obligation</h3>
        <ul>
            <li>Compliance with applicable laws</li>
            <li>Regulatory reporting requirements</li>
            <li>Financial record keeping</li>
        </ul>

        <h2>5. Data Security Measures</h2>
        <p>We implement comprehensive technical and organisational measures:</p>

        <h3>Technical Safeguards</h3>
        <ul>
            <li>End-to-end encryption for data transmission</li>
            <li>Secure cloud infrastructure with access controls</li>
            <li>Regular security patches and updates</li>
            <li>Network monitoring and intrusion detection</li>
            <li>Secure backup and recovery procedures</li>
        </ul>

        <h3>Organisational Measures</h3>
        <ul>
            <li>Staff training on data protection principles</li>
            <li>Clear data handling procedures and policies</li>
            <li>Regular security audits and assessments</li>
            <li>Incident response and breach notification procedures</li>
            <li>Vendor due diligence and data processing agreements</li>
        </ul>

        <h2>6. International Data Transfers</h2>
        <p>When transferring personal data internationally, we ensure:</p>
        <ul>
            <li>Adequacy decisions or appropriate safeguards are in place</li>
            <li>Standard contractual clauses for data protection</li>
            <li>Binding corporate rules where applicable</li>
            <li>Regular review of transfer mechanisms</li>
        </ul>

        <h2>7. Data Protection Impact Assessments</h2>
        <p>We conduct Data Protection Impact Assessments (DPIAs) for:</p>
        <ul>
            <li>High-risk data processing activities</li>
            <li>New technologies or processing methods</li>
            <li>Large-scale processing of sensitive data</li>
            <li>Systematic monitoring of public areas</li>
        </ul>

        <h2>8. Data Breach Procedures</h2>
        <p>In the event of a data breach, we:</p>
        <ul>
            <li>Notify the ICO within 72 hours if required</li>
            <li>Inform affected individuals without undue delay</li>
            <li>Document all breaches and response measures</li>
            <li>Implement corrective actions to prevent recurrence</li>
        </ul>

        <h2>9. Third-Party Processors</h2>
        <p>We ensure all third-party data processors:</p>
        <ul>
            <li>Provide sufficient guarantees of GDPR compliance</li>
            <li>Sign comprehensive data processing agreements</li>
            <li>Undergo regular compliance audits</li>
            <li>Implement appropriate technical and organisational measures</li>
        </ul>

        <h2>10. Staff Training and Awareness</h2>
        <p>Our team receives regular training on:</p>
        <ul>
            <li>GDPR principles and requirements</li>
            <li>Data handling best practices</li>
            <li>Incident reporting procedures</li>
            <li>Privacy by design principles</li>
        </ul>

        <h2>11. Exercising Your Rights</h2>
        <p>To exercise your data protection rights:</p>
        <ul>
            <li>Contact our Data Protection Officer</li>
            <li>Provide sufficient information to identify your data</li>
            <li>Specify which right you wish to exercise</li>
            <li>We will respond within one month</li>
        </ul>

        <h2>12. Contact Information</h2>
        <div class="contact-info">
            <p><strong>Data Protection Officer</strong><br>
            Email: <a href="mailto:dpo@ukdataservices.co.uk">dpo@ukdataservices.co.uk</a><br>
            Phone: <a href="tel:+441692689150">+44 1692 689150</a></p>
            
            <p><strong>General Privacy Enquiries</strong><br>
            Email: <a href="mailto:privacy@ukdataservices.co.uk">privacy@ukdataservices.co.uk</a></p>
            
            <p><strong>Postal Address</strong><br>
            UK Data Services<br>
            Data Protection Officer<br>
            United Kingdom</p>
        </div>

        <h2>13. Supervisory Authority</h2>
        <p>You have the right to lodge a complaint with the UK's supervisory authority:</p>
        <p><strong>Information Commissioner's Office (ICO)</strong><br>
        Website: <a href="https://ico.org.uk" target="_blank" rel="noopener">https://ico.org.uk</a><br>
        Phone: 0303 123 1113<br>
        Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF</p>

        <p><em>This page demonstrates our commitment to data protection excellence and regulatory compliance in all our data services.</em></p>
    </main>

    <!-- Footer -->
    <footer class="footer">
        <div class="container">
            <div class="footer-content">
                <div class="footer-section">
                    <div class="footer-logo">
                        <img src="assets/images/logo-white.svg" alt="UK Data Services">
                    </div>
                    <p>Enterprise data intelligence solutions for modern British business. Transform your operations with accurate, actionable insights and regulatory-compliant data services.</p>
                </div>
                
                <div class="footer-section">
                    <h3>Our Services</h3>
                    <ul>
                        <li><a href="/services/competitive-intelligence">Competitive Intelligence</a></li>
                        <li><a href="/services/price-monitoring">Price Monitoring</a></li>
                        <li><a href="/services/data-cleaning">Data Cleaning</a></li>
                        <li><a href="/#services">All Services</a></li>
                    </ul>
                </div>

                <div class="footer-section">
                    <h3>Locations</h3>
                    <ul>
                        <li><a href="/locations/london">London</a></li>
                        <li><a href="/locations/manchester">Manchester</a></li>
                        <li><a href="/locations/birmingham">Birmingham</a></li>
                    </ul>
                </div>

                <div class="footer-section">
                    <h3>Resources & Insights</h3>
                    <ul>
                        <li><a href="/blog/">Data Intelligence Blog</a></li>
                        <li><a href="/case-studies/">Case Studies</a></li>
                        <li><a href="/about">About UK Data Services</a></li>
                        <li><a href="/project-types">Project Types</a></li>
                        <li><a href="/faq">FAQ</a></li>
                        <li><a href="/quote">Request Consultation</a></li>
                    </ul>
                </div>

                <div class="footer-section">
                    <h3>Legal</h3>
                    <ul>
                        <li><a href="/privacy-policy">Privacy Policy</a></li>
                        <li><a href="/terms-of-service">Terms of Service</a></li>
                        <li><a href="/cookie-policy">Cookie Policy</a></li>
                        <li><a href="/gdpr-compliance">GDPR Compliance</a></li>
                    </ul>
                </div>
            </div>
            
            <div class="footer-bottom">
                <p>&copy; <?php echo date('Y'); ?> UK Data Services. All rights reserved.</p>
                <div class="social-links">
                    <a href="https://linkedin.com/company/uk-data-services" aria-label="LinkedIn" target="_blank" rel="noopener noreferrer"><img src="assets/images/icon-linkedin.svg" alt="LinkedIn"></a>
                    <a href="https://twitter.com/ukdataservices" aria-label="Twitter" target="_blank" rel="noopener noreferrer"><img src="assets/images/icon-twitter.svg" alt="Twitter"></a>
                </div>
            </div>
        </div>
    </footer>

    <!-- Scripts -->
    <script src="assets/js/main.js"></script>
</body>
</html>