Privacy Notice

Last updated: [27.04.2025]

This Privacy Notice explains how DPOdesk (“we”, “our”, or “us”) collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

DPOdesk is a UK-based consultancy providing data protection and privacy services to international small and medium-sized enterprises (SMEs). We are registered in the United Kingdom and act as the data controller for the purposes of this website.

What Data We Collect

We may collect and process the following personal data:

  • Name and contact details (e.g. email address, phone number)

  • Company or business details (if you provide them)

  • Information provided when you contact us via the website or email

  • Technical data such as IP address, browser type, and device information (via cookies or analytics tools)

How We Use Your Data

We process personal data for the following purposes:

  • To respond to enquiries

  • To provide services to our clients

  • To maintain business records and comply with legal obligations

  • To improve our website and user experience

Lawful Basis for Processing

We rely on one or more of the following lawful bases:

  • Contract: where processing is necessary for a contract with you or to take steps at your request before entering into one.

  • Legitimate Interests: to respond to your enquiries or maintain business relationships.

  • Legal Obligation: where we are required to retain records or provide information under UK law.

Data Sharing

We do not sell or rent your personal data. We may share your data with:

  • Service providers (e.g. web hosting or analytics)

  • Legal or regulatory bodies when required to do so

All third parties are required to respect the confidentiality and security of your data.

International Transfers

As we primarily serve non-UK clients, we may transfer personal data internationally. We ensure appropriate safeguards are in place for any transfers outside the UK.

Your Data Protection Rights

You have the right to:

  • Access your personal data

  • Request correction or deletion

  • Object to or restrict certain processing

  • Lodge a complaint with the UK Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us at [DanielEbbrell@dpo-desk.com].