GDPR Compliance Policy
Last updated:
Our commitment
Ellexor is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 in everything we build and operate.
Principles we follow
- Lawfulness, fairness and transparency
- Purpose limitation and data minimisation
- Accuracy and storage limitation
- Integrity, confidentiality and accountability
Privacy by design
Every project includes data protection by design and by default: role-based access, encryption in transit and at rest, audit logging and secure development practices.
Acting as a processor
Where we process personal data on behalf of clients, we do so under a Data Processing Agreement and only on documented instructions.
Data breaches
We maintain an incident response procedure and will notify affected clients without undue delay, and the ICO within 72 hours where required.
Contact
Questions about data protection can be sent to [email protected].