GDPR Compliance Statement

At ARM Acquisitions, we are committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Legal Framework

ARM Acquisitions acts as a data controller under the UK GDPR. We are responsible for determining the purposes and means of processing personal data.

2. Data Protection Principles

We adhere to the following principles when processing personal data:

· Lawfulness, fairness, and transparency

· Purpose limitation

· Data minimisation

· Accuracy

· Storage limitation

· Integrity and confidentiality

· Accountability

3. Lawful Basis for Processing

We rely on consent as our lawful basis for processing personal data. Individuals have the right to withdraw their consent at any time.

4. Data Subject Rights

Under the UK GDPR, individuals have the right to:

· Access their personal data

· Request correction of inaccurate data

· Request erasure of their data

· Restrict or object to processing

· Data portability

· Withdraw consent at any time

· Lodge a complaint with the Information Commissioner’s Office (ICO)

5. Data Security Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and secure data storage.

6. Data Retention

We retain personal data for a period of 12 months from the date of collection, unless a longer retention period is required or permitted by law.

7. Third-Party Processors

We do not share personal data with third parties without explicit consent.

8. International Data Transfers

We do not transfer personal data outside the UK. If this changes, we will ensure appropriate safeguards are in place.

9. Data Breach Response

We have procedures in place to detect, report, and investigate personal data breaches in accordance with UK GDPR requirements.

10. Contact

If you have any questions about our GDPR compliance, please contact us at:

Email: admin@armacquisitions.co.uk
Phone: [Insert Contact Number]