Data Protection

How we handle and protect your personal data

Sycamore Business Consulting is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we handle and protect your personal information.

Data Controller

Sycamore Business Consulting is the data controller for your personal information. Our registered address is:

123 Business Centre
London, UK
Company Registration Number: 12345678

Data We Collect

We collect and process the following categories of personal data:

  • Identity Data: Name, job title, company name
  • Contact Data: Email address, phone number, postal address
  • Technical Data: IP address, browser type, operating system
  • Usage Data: Information about how you use our website and services
  • Marketing Data: Your preferences in receiving marketing communications

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: Where you have given us explicit consent to process your data
  • Contract: Where processing is necessary for the performance of a contract with you
  • Legitimate Interest: Where processing is necessary for our legitimate business interests
  • Legal Obligation: Where processing is necessary to comply with the law

How We Use Your Data

We use your personal data for the following purposes:

  • To provide and maintain our services
  • To process and respond to your enquiries
  • To send you marketing communications (with your consent)
  • To improve our website and services
  • To comply with legal and regulatory obligations

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting. Our, or reporting requirements retention periods are:

  • Customer Data: 6 years after the end of our business relationship
  • Marketing Data: Until you withdraw consent
  • Enquiry Data: 2 years from the date of enquiry

Your Rights

Under UK GDPR, you have the following rights:

  • Right to Access: You can request a copy of the personal data we hold about you
  • Right to Rectification: You can request correction of inaccurate personal data
  • Right to Erasure: You can request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: You can request restriction of processing
  • Right to Data Portability: You can request your data in a portable format
  • Right to Object: You can object to processing based on legitimate interests
  • Right to Withdraw Consent: You can withdraw consent at any time

Data Transfers

Your personal data may be transferred to and processed in countries outside the UK. Where we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Data Security

We have implemented appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and testing
  • Access controls and authentication measures
  • Staff training on data protection
  • Incident response procedures

Complaints

If you have a complaint about how we have handled your personal data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: www.ico.org.uk
  • Phone: 0303 123 1113

Contact Our Data Protection Officer

For any data protection inquiries, please contact us: