1. Purpose

​

This policy sets out how F&R Business Support Limited (“the Company”) processes and protects personal data in accordance with applicable data protection laws.

​

2. Scope

​

This policy applies to all personal data processed by the Company in connection with its services, including data relating to clients, employees, and subcontractors.

​

3. Legal Framework

​

The Company complies with:

​

• UK General Data Protection Regulation (UK GDPR)

• Data Protection Act 2018

​

4. Data Protection Principles

​

Personal data shall be:

​

• Processed lawfully, fairly, and transparently

• Collected for specified, explicit, and legitimate purposes

• Adequate, relevant, and limited to what is necessary

• Accurate and kept up to date

• Retained only for as long as necessary

• Processed in a manner that ensures appropriate security

​

5. Roles and Responsibilities

​

Where applicable:

​

• The Client acts as Data Controller

• The Company acts as Data Processor

The Client is responsible for ensuring lawful processing and for providing appropriate instructions.

​

6. Data Processing

​

The Company shall:

• Process personal data only as necessary for the provision of Services

• Not use data for its own commercial purposes

• Not sell, share, or disclose data for marketing purposes

• Restrict access to authorised personnel only

​

7. Security Measures

​

The Company implements appropriate technical and organisational measures to protect personal data against:

​

• Unauthorised or unlawful processing

• Accidental loss, destruction, or damage

​

8. Data Breach Management

​

Any personal data breach shall be:

​

• Identified and assessed without undue delay

• Notified where required under applicable law

• Managed to mitigate risk and impact

​

9. Data Retention

​

Personal data shall be retained only for as long as necessary for:

​

• Service delivery

• Legal and regulatory obligations

​

10. Policy Governance

​

This policy is subject to periodic review and may be updated as required.

​

11. Limitation & Hierarchy

​

Nothing in this policy creates any additional liability beyond that set out in the Company’s Terms & Conditions of Service.

​

​

This policy shall be read in conjunction with the Company’s Terms & Conditions. In the event of any conflict, the Terms & Conditions shall prevail.