Data Protection Policy

Purpose

The purpose of this Data Protection Policy is to establish guidelines for the collection, processing, storage, and sharing of personal data at Ruxley Integrated Global Services Limited. This policy aims to ensure compliance with applicable data protection laws and regulations while protecting the privacy and rights of individuals.

Scope

This policy applies to all employees, contractors, and third-party service providers who handle personal data on behalf of Ruxley Integrated Global Services Limited, across all locations and business functions.

Policy Statement “Ruxley is committed to safeguarding the privacy and security of personal data. We will ensure that personal data is collected and processed lawfully, transparently, and for legitimate purposes in line with applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR) and any local data protection laws.”

Definitions

Personal Data: Any information relating to an identified or identifiable natural person, including names, contact information, identification numbers, and any other data that can identify an individual.
Data Processing: Any operation performed on personal data, including collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, disclosure, erasure, or destruction.

Principles of Data Protection

Ruxley will adhere to the following principles when processing personal data:

Lawfulness, Fairness, and Transparency: Personal data will be processed lawfully, fairly, and in a transparent manner. Individuals will be informed about the purposes of data collection and processing.
Purpose Limitation: Personal data will be collected for specified, legitimate purposes and will not be further processed in a manner incompatible with those purposes.
Data Minimization: Only personal data that is necessary for the purposes of processing will be collected and maintained.
Accuracy: Ruxley will take reasonable steps to ensure that personal data is accurate, complete, and up-to-date.
Storage Limitation: Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, in compliance with legal obligations.
Integrity and Confidentiality: Ruxley will implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction.

Data Subject Rights

Individuals have the following rights concerning their personal data:

Right to Access: Individuals have the right to request access to their personal data and obtain information about how it is being processed.
Right to Rectification: Individuals have the right to request the correction of inaccurate or incomplete personal data.
Right to Erasure: Individuals have the right to request the deletion of their personal data under certain conditions.
Right to Restrict Processing: Individuals have the right to request the restriction of processing their personal data under certain circumstances.
Right to Data Portability: Individuals have the right to receive their personal data in a structured, commonly used, and machine-readable format.
Right to Object: Individuals have the right to object to the processing of their personal data under certain circumstances.

Data Breach Response

Ruxley will implement procedures to detect, report, and investigate data breaches. In the event of a data breach, we will notify affected individuals and relevant authorities as required by applicable data protection laws.

Data Protection Officer (DPO)

Ruxley will appoint a Data Protection Officer (DPO) responsible for overseeing compliance with this policy, acting as a point of contact for data subjects, and providing guidance on data protection matters.

Training and Awareness

All employees will receive training on data protection principles and practices to ensure they understand their responsibilities and obligations under this policy.

Compliance and Enforcement

Failure to comply with this Data Protection Policy may result in disciplinary action, up to and including termination of employment. Ruxley reserves the right to review and audit compliance with this policy.

Policy Review

This Data Protection Policy will be reviewed annually or as needed to ensure its effectiveness and compliance with applicable laws and regulations. Updates will be communicated to all employees.