Files
ukaiautomation/gdpr-compliance.php

468 lines
19 KiB
PHP
Raw Normal View History

<?php
// Enhanced security headers
header('X-Content-Type-Options: nosniff');
header('X-Frame-Options: DENY');
header('X-XSS-Protection: 1; mode=block');
header('Strict-Transport-Security: max-age=31536000; includeSubDomains');
header('Referrer-Policy: strict-origin-when-cross-origin');
$page_title = "GDPR Compliance | UK Data Services - Data Protection Excellence";
$page_description = "Learn about UK Data Services' comprehensive GDPR compliance framework and commitment to protecting personal data in all our web scraping and analytics services.";
$canonical_url = "https://ukdataservices.co.uk/gdpr-compliance";
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title><?php echo htmlspecialchars($page_title); ?></title>
<meta name="description" content="<?php echo htmlspecialchars($page_description); ?>">
<meta name="keywords" content="GDPR compliance, data protection, UK data law, privacy rights, data security">
<meta name="author" content="UK Data Services">
<meta name="robots" content="index, follow">
<link rel="canonical" href="<?php echo htmlspecialchars($canonical_url); ?>">
<!-- Open Graph / Facebook -->
<meta property="og:type" content="website">
<meta property="og:url" content="<?php echo htmlspecialchars($canonical_url); ?>">
<meta property="og:title" content="<?php echo htmlspecialchars($page_title); ?>">
<meta property="og:description" content="<?php echo htmlspecialchars($page_description); ?>">
<meta property="og:image" content="https://ukdataservices.co.uk/assets/images/ukds-og-image.png">
<meta property="og:site_name" content="UK Data Services">
<!-- Twitter -->
<meta name="twitter:card" content="summary_large_image">
<meta name="twitter:url" content="<?php echo htmlspecialchars($canonical_url); ?>">
<meta name="twitter:title" content="<?php echo htmlspecialchars($page_title); ?>">
<meta name="twitter:description" content="<?php echo htmlspecialchars($page_description); ?>">
<meta name="twitter:image" content="https://ukdataservices.co.uk/assets/images/ukds-og-image.png">
<!-- Favicon -->
<link rel="icon" type="image/svg+xml" href="assets/images/favicon.svg">
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Roboto+Slab:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Lato:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap" rel="stylesheet">
<link rel="stylesheet" href="assets/css/main.css">
<style>
.legal-content {
max-width: 800px;
margin: 0 auto;
padding: 40px 20px;
line-height: 1.6;
}
.legal-content h1 {
color: #144784;
margin-bottom: 20px;
text-align: center;
}
.legal-content h2 {
color: #179e83;
margin-top: 40px;
margin-bottom: 20px;
border-bottom: 2px solid #179e83;
padding-bottom: 10px;
}
.legal-content h3 {
color: #144784;
margin-top: 30px;
margin-bottom: 15px;
}
.legal-content p, .legal-content li {
margin-bottom: 15px;
color: #444;
}
.legal-content ul {
margin-left: 20px;
}
.compliance-highlight {
background: #ffffff;
color: #1a1a1a;
padding: 30px;
border-radius: 12px;
margin: 30px 0;
text-align: center;
border: 3px solid #179e83;
box-shadow: 0 4px 20px rgba(23, 158, 131, 0.1);
}
.compliance-highlight h3 {
color: #144784;
margin-bottom: 15px;
font-weight: 600;
}
.rights-grid {
display: grid;
grid-template-columns: repeat(auto-fit, minmax(250px, 1fr));
gap: 20px;
margin: 30px 0;
}
.rights-card {
background: #f8f9fa;
padding: 20px;
border-radius: 8px;
border-left: 4px solid #179e83;
}
.rights-card h4 {
color: #144784;
margin-bottom: 10px;
}
.contact-info {
background: #f8f9fa;
padding: 20px;
border-radius: 8px;
margin: 30px 0;
}
.last-updated {
text-align: center;
font-style: italic;
color: #666;
margin-bottom: 30px;
}
</style>
</head>
<body>
<!-- Navigation -->
<nav class="navbar" id="navbar">
<div class="nav-container">
<div class="nav-logo">
<a href="/">
<img src="assets/images/ukds-main-logo.png" alt="UK Data Services" class="logo">
</a>
</div>
<div class="nav-menu" id="nav-menu">
<a href="/" class="nav-link">Home</a>
<a href="/#services" class="nav-link">Capabilities</a>
<a href="project-types" class="nav-link">Project Types</a>
<a href="about" class="nav-link">About</a>
<a href="blog/" class="nav-link">Blog</a>
<a href="/#contact" class="nav-link">Contact</a>
<a href="quote" class="nav-link cta-button">Request Consultation</a>
</div>
<div class="nav-toggle" id="nav-toggle">
<span class="bar"></span>
<span class="bar"></span>
<span class="bar"></span>
</div>
</div>
</nav>
<main class="legal-content">
<h1>GDPR Compliance</h1>
<p class="last-updated">Last Updated: <?php echo date('jS F Y'); ?></p>
<div class="compliance-highlight">
<h3>🛡️ Data Protection Excellence</h3>
<p>UK Data Services is fully compliant with the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018. We prioritise data protection in all our web scraping and analytics services.</p>
</div>
<h2>1. Our GDPR Commitment</h2>
<p>As a leading UK data services provider, we have implemented comprehensive GDPR compliance measures across all our operations:</p>
<ul>
<li>Full compliance with GDPR and UK data protection legislation</li>
<li>Transparent data processing practices</li>
<li>Robust security measures and access controls</li>
<li>Regular compliance audits and staff training</li>
<li>Clear procedures for data subject rights</li>
<li>Comprehensive data protection impact assessments</li>
</ul>
<h2>2. Data Protection Principles</h2>
<p>We adhere to all six GDPR data protection principles:</p>
<h3>Lawfulness, Fairness and Transparency</h3>
<ul>
<li>All data processing has a clear legal basis</li>
<li>Transparent communication about data use</li>
<li>Fair processing that respects individual rights</li>
</ul>
<h3>Purpose Limitation</h3>
<ul>
<li>Data collected for specific, explicit purposes</li>
<li>No processing beyond the original purpose</li>
<li>Clear project scope and data requirements</li>
</ul>
<h3>Data Minimisation</h3>
<ul>
<li>Only collect data that's necessary for the purpose</li>
<li>Regular review of data collection practices</li>
<li>Efficient data processing methods</li>
</ul>
<h3>Accuracy</h3>
<ul>
<li>Maintain accurate and up-to-date records</li>
<li>Correct inaccurate data promptly</li>
<li>Regular data quality assessments</li>
</ul>
<h3>Storage Limitation</h3>
<ul>
<li>Retain data only as long as necessary</li>
<li>Clear data retention schedules</li>
<li>Secure data disposal procedures</li>
</ul>
<h3>Integrity and Confidentiality</h3>
<ul>
<li>Robust security measures and encryption</li>
<li>Access controls and authentication</li>
<li>Regular security audits and updates</li>
</ul>
<h2>3. Your Data Protection Rights</h2>
<p>Under GDPR, you have comprehensive rights regarding your personal data:</p>
<div class="rights-grid">
<div class="rights-card">
<h4>Right to be Informed</h4>
<p>Clear information about how we process your personal data, provided through our privacy policy and direct communications.</p>
</div>
<div class="rights-card">
<h4>Right of Access</h4>
<p>Request copies of your personal data and information about how we process it. We respond within one month.</p>
</div>
<div class="rights-card">
<h4>Right to Rectification</h4>
<p>Have inaccurate or incomplete personal data corrected or completed without undue delay.</p>
</div>
<div class="rights-card">
<h4>Right to Erasure</h4>
<p>Request deletion of your personal data in certain circumstances, including withdrawal of consent.</p>
</div>
<div class="rights-card">
<h4>Right to Restrict Processing</h4>
<p>Request that we limit how we process your personal data in specific situations.</p>
</div>
<div class="rights-card">
<h4>Right to Data Portability</h4>
<p>Receive your personal data in a structured, machine-readable format for transfer to another controller.</p>
</div>
<div class="rights-card">
<h4>Right to Object</h4>
<p>Object to processing based on legitimate interests, direct marketing, or research purposes.</p>
</div>
<div class="rights-card">
<h4>Rights Related to Automated Processing</h4>
<p>Protection against automated decision-making and profiling that produces legal or significant effects.</p>
</div>
</div>
<h2>4. Legal Basis for Processing</h2>
<p>We only process personal data when we have a valid legal basis:</p>
<h3>Contractual Necessity</h3>
<ul>
<li>Performance of contracts for data services</li>
<li>Pre-contractual measures and quotations</li>
<li>Service delivery and project management</li>
</ul>
<h3>Legitimate Interest</h3>
<ul>
<li>Business operations and administration</li>
<li>Service improvement and development</li>
<li>Security and fraud prevention</li>
</ul>
<h3>Consent</h3>
<ul>
<li>Marketing communications</li>
<li>Optional data processing activities</li>
<li>Cookie usage beyond essential cookies</li>
</ul>
<h3>Legal Obligation</h3>
<ul>
<li>Compliance with applicable laws</li>
<li>Regulatory reporting requirements</li>
<li>Financial record keeping</li>
</ul>
<h2>5. Data Security Measures</h2>
<p>We implement comprehensive technical and organisational measures:</p>
<h3>Technical Safeguards</h3>
<ul>
<li>End-to-end encryption for data transmission</li>
<li>Secure cloud infrastructure with access controls</li>
<li>Regular security patches and updates</li>
<li>Network monitoring and intrusion detection</li>
<li>Secure backup and recovery procedures</li>
</ul>
<h3>Organisational Measures</h3>
<ul>
<li>Staff training on data protection principles</li>
<li>Clear data handling procedures and policies</li>
<li>Regular security audits and assessments</li>
<li>Incident response and breach notification procedures</li>
<li>Vendor due diligence and data processing agreements</li>
</ul>
<h2>6. International Data Transfers</h2>
<p>When transferring personal data internationally, we ensure:</p>
<ul>
<li>Adequacy decisions or appropriate safeguards are in place</li>
<li>Standard contractual clauses for data protection</li>
<li>Binding corporate rules where applicable</li>
<li>Regular review of transfer mechanisms</li>
</ul>
<h2>7. Data Protection Impact Assessments</h2>
<p>We conduct Data Protection Impact Assessments (DPIAs) for:</p>
<ul>
<li>High-risk data processing activities</li>
<li>New technologies or processing methods</li>
<li>Large-scale processing of sensitive data</li>
<li>Systematic monitoring of public areas</li>
</ul>
<h2>8. Data Breach Procedures</h2>
<p>In the event of a data breach, we:</p>
<ul>
<li>Notify the ICO within 72 hours if required</li>
<li>Inform affected individuals without undue delay</li>
<li>Document all breaches and response measures</li>
<li>Implement corrective actions to prevent recurrence</li>
</ul>
<h2>9. Third-Party Processors</h2>
<p>We ensure all third-party data processors:</p>
<ul>
<li>Provide sufficient guarantees of GDPR compliance</li>
<li>Sign comprehensive data processing agreements</li>
<li>Undergo regular compliance audits</li>
<li>Implement appropriate technical and organisational measures</li>
</ul>
<h2>10. Staff Training and Awareness</h2>
<p>Our team receives regular training on:</p>
<ul>
<li>GDPR principles and requirements</li>
<li>Data handling best practices</li>
<li>Incident reporting procedures</li>
<li>Privacy by design principles</li>
</ul>
<h2>11. Exercising Your Rights</h2>
<p>To exercise your data protection rights:</p>
<ul>
<li>Contact our Data Protection Officer</li>
<li>Provide sufficient information to identify your data</li>
<li>Specify which right you wish to exercise</li>
<li>We will respond within one month</li>
</ul>
<h2>12. Contact Information</h2>
<div class="contact-info">
<p><strong>Data Protection Officer</strong><br>
Email: <a href="mailto:dpo@ukdataservices.co.uk">dpo@ukdataservices.co.uk</a><br>
Phone: <a href="tel:+441692689150">+44 1692 689150</a></p>
<p><strong>General Privacy Enquiries</strong><br>
Email: <a href="mailto:privacy@ukdataservices.co.uk">privacy@ukdataservices.co.uk</a></p>
<p><strong>Postal Address</strong><br>
UK Data Services<br>
Data Protection Officer<br>
United Kingdom</p>
</div>
<h2>13. Supervisory Authority</h2>
<p>You have the right to lodge a complaint with the UK's supervisory authority:</p>
<p><strong>Information Commissioner's Office (ICO)</strong><br>
Website: <a href="https://ico.org.uk" target="_blank" rel="noopener">https://ico.org.uk</a><br>
Phone: 0303 123 1113<br>
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF</p>
<p><em>This page demonstrates our commitment to data protection excellence and regulatory compliance in all our data services.</em></p>
</main>
<!-- Footer -->
<footer class="footer">
<div class="container">
<div class="footer-content">
<div class="footer-section">
<div class="footer-logo">
<img src="assets/images/logo-white.svg" alt="UK Data Services">
</div>
<p>Enterprise data intelligence solutions for modern British business. Transform your operations with accurate, actionable insights and regulatory-compliant data services.</p>
</div>
<div class="footer-section">
<h3>Our Services</h3>
<ul>
<li><a href="/services/competitive-intelligence">Competitive Intelligence</a></li>
<li><a href="/services/price-monitoring">Price Monitoring</a></li>
<li><a href="/services/data-cleaning">Data Cleaning</a></li>
<li><a href="/#services">All Services</a></li>
</ul>
</div>
<div class="footer-section">
<h3>Locations</h3>
<ul>
<li><a href="/locations/london">London</a></li>
<li><a href="/locations/manchester">Manchester</a></li>
<li><a href="/locations/birmingham">Birmingham</a></li>
</ul>
</div>
<div class="footer-section">
<h3>Resources & Insights</h3>
<ul>
<li><a href="/blog/">Data Intelligence Blog</a></li>
<li><a href="/case-studies/">Case Studies</a></li>
<li><a href="/about">About UK Data Services</a></li>
<li><a href="/project-types">Project Types</a></li>
<li><a href="/faq">FAQ</a></li>
<li><a href="/quote">Request Consultation</a></li>
</ul>
</div>
<div class="footer-section">
<h3>Legal</h3>
<ul>
<li><a href="/privacy-policy">Privacy Policy</a></li>
<li><a href="/terms-of-service">Terms of Service</a></li>
<li><a href="/cookie-policy">Cookie Policy</a></li>
<li><a href="/gdpr-compliance">GDPR Compliance</a></li>
</ul>
</div>
</div>
<div class="footer-bottom">
<p>&copy; <?php echo date('Y'); ?> UK Data Services. All rights reserved.</p>
<div class="social-links">
<a href="https://linkedin.com/company/uk-data-services" aria-label="LinkedIn" target="_blank" rel="noopener noreferrer"><img src="assets/images/icon-linkedin.svg" alt="LinkedIn"></a>
<a href="https://twitter.com/ukdataservices" aria-label="Twitter" target="_blank" rel="noopener noreferrer"><img src="assets/images/icon-twitter.svg" alt="Twitter"></a>
</div>
</div>
</div>
</footer>
<!-- Scripts -->
<script src="assets/js/main.js"></script>
</body>
</html>