GDPR Policy

---

1. Introduction:

This data protection policy (the "Policy") sets out the ways in which C&J ERP Consulting Ltd ("we", "us", "our") collect, use, and protect personal data about our clients and other individuals who interact with us. It applies to personal data processed by us in the course of providing IT consulting services.

2. Scope:

This Policy applies to all personal data processed by us, regardless of whether it is collected online, via phone, email, or in person.

3. Definitions:

"Personal data" means any information about an individual from which that person can be identified. It includes, but is not limited to, names, addresses, phone numbers, email addresses, and financial information.

4. Collection and use of personal data:

We collect and use personal data for the following purposes:

• To provide IT consulting services to our clients
• To communicate with our clients and other individuals who interact with us
• To improve our services and develop new products and services
• To comply with legal and regulatory obligations

5. Legal basis for processing personal data:

The legal basis for processing personal data will depend on the specific purpose for which the data is collected and used. In most cases, we will process personal data on the basis of one or more of the following:

• The performance of a contract with the individual
• Our legitimate business interests
• Compliance with legal and regulatory obligations

6. Sharing personal data:

We may share personal data with third parties in the following circumstances:

• With service providers and partners who assist us in providing IT consulting services or who perform functions on our behalf, such as payment processing or data analysis
• With law enforcement or other government agencies, as required by law or in response to a valid legal request
• In connection with a sale or merger of our business, or the sale or transfer of our assets

7. Retention of personal data:

We will retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

8. Data security:

We have implemented appropriate technical and organisational measures to protect personal data from unauthorised access, use, or disclosure. These measures include the use of secure servers, encryption, and firewalls.

9. Data subject rights:

Under the data protection laws of Scotland, individuals have certain rights with respect to their personal data, including the right to access, rectify, erase, restrict, and object to the processing of their data. If you would like to exercise any of these rights, please contact us using the details provided below.

10. Contact us:

If you have any questions or concerns about our data protection practices, or if you would like to exercise any of your data subject rights, please contact us at:

C&J ERP Consulting Ltd 

650 Stirling Road

Cumbernauld

North Lanarkshire

Scotland

G67 4AB

Contact Us