Our Data Protection Officer is Daniel Evans (dataprivacy@diablosdesigns.co.uk)

All of our staff and contractors are familiar with GDPR and their personal responsibilities. You are welcome to see our policy. Please request via our contact us page and ask for our policies.

Our staff are fully trained on the new legislation and will continue to be trained and advised every two years (or sooner if there is a major change in legislation).

We also follow the guidelines of the GDPR regarding ‘right to erasure process’. If you wish to be erased from our system, please contact us via contact us page and ask for all your details to be erased.

We have a privacy notice which informs people what we do with their personal data, this is saved to the website. We only store personal data of our clients for contact reasons due to ongoing projects with them. We would also store details for a potential client if he or she has asked us to call them in regards to a new project. We do now promote or market or sell any of our data we have for our clients and we also store the bare minimum of information for our clients as we just use the data to contact regarding projects or renewal of our services.

No personal data is transferred outside of the EU

When processing data we undertake the following:

  • The processing is lawful, fair and transparent
  • Transparent about what the data is being used for
  • Data is collected for a specific purpose
  • The data is necessary for the purpose
  • The data must be accurate and kept up to date
  • Data is not kept for longer than necessary
  • The data is kept safe and secure

We do not process sensitive information directly. We may process information on behalf of a client if they ask. This would be subject to strict privacy controls. For our policy on this, please contact the Data Protection Officer.

All storage is secure and our suppliers have GDPR procedures in place.

We have a notification process in place for any breach