Lots2Go – GDPR Policy​

​

Lots2Go is committed to complying with the UK General Data Protection Regulation (UK GDPR).

​

1. Data Protection Principles

​

We process personal data in accordance with the following principles:

​

• lawfully, fairly, and transparently

• for specified, explicit purposes

• limited to what is necessary

• accurate and kept up to date

• retained only as long as necessary

• secured against unauthorised access

​

2. Responsibilities

​

Lots2Go is responsible for ensuring:

​

• staff and contractors handle data securely

• personal data is accessed only where necessary

• data breaches are identified and reported promptly

​

3. Data Breaches

​

Any personal data breach will be:

​

• assessed promptly

• reported to the ICO where required

• communicated to affected individuals where there is a high risk

​

4. Third Parties

​

Where third parties process personal data on our behalf, we ensure appropriate contractual safeguards are in place.

​