.png?width=250&height=56&name=stonewater-logo%20(1).png)
GDPR Compliance at DSP
1. Understanding GDPR & Its Relevance
The General Data Protection Regulation (GDPR) is the EU’s comprehensive data privacy framework, replacing the former UK Data Protection Act. It governs how organisations collect, use, store, and share personal information.
GDPR applies to:
-
All organisations established in the EU/UK that process personal data
-
Any entity outside the EU/UK that handles data of individuals located in the EU/UK
If you deal with customers, suppliers, prospects, staff — personal data flows through your systems: GDPR affects you.
Under GDPR, organisations must:
-
Have a lawful basis for processing data
-
Demonstrate accountability (i.e. show compliance)
-
Respect individual rights (access, correction, erasure, etc.)
-
Protect data through appropriate security measures
To learn more about GDPR in detail, the Information Commissioner’s Office (ICO) provides a full guide. (See: Guide to the General Data Protection Regulation)
2. DSP’s Commitment to GDPR Compliance
We view GDPR not just as a regulatory requirement, but as a core principle guiding our operations. Here’s what we’ve done to align with its mandates:
a) Expert review & internal audit
We enlisted data protection consultants to audit our systems, processes, and practices. Their recommendations were incorporated to bring all operations into full compliance.
b) Revised Privacy Policy
Our website’s Privacy Policy has been thoroughly updated to:
-
Clearly outline what personal data we collect
-
Explain the purposes and legal basis for processing
-
Describe how we protect data and for how long
-
Detail individuals’ rights and how they can exercise them
c) Strengthened internal policies
We overhauled our data protection, retention, and internal handling policies. We also introduced a GDPR Compliance Statement, which clients may request to formalise our commitment.
d) Vendor & supplier standards
We reviewed all third-party processors and hosting partners. Each contract now includes GDPR-compliant data processing terms, ensuring consistent compliance across our supply chain.
3. Your Rights & How We Support Them
As a data subject (i.e. person whose data we hold), you are entitled to:
-
Access your personal data
-
Correct or update inaccurate data
-
Erase (right to be forgotten) in certain circumstances
-
Restrict or object to processing
-
Data portability
-
Withdraw consent, where that is the legal basis
If you'd like to exercise any of these rights, we will respond within the statutory timeframe and guide you through the process.
4. How to Reach Us
If you have questions, concerns, or want to make a data request, we’re here to help:
Sales Enquiries
📞 +44 (0)20 3880 1686
Technical Support
📞 +44 (0)20 3880 1686
We view data privacy as a partnership. If you’d like further reassurance or a more formal statement tailored to your company, just ask.
