At H & D Claim Assessors Ltd (trading as HDCA), we take our obligations under the General Data Protection Regulation (GDPR) seriously. The GDPR is a European Union regulation that establishes guidelines for the collection, use, and storage of personal data. As part of our commitment to safeguarding your privacy and protecting your personal data, we ensure that all processing of personal data is carried out in compliance with the GDPR.

Legal Basis for Processing Personal Data

Under the GDPR, we must have a legal basis for processing personal data. We process personal data based on the following legal grounds:

• Consent – Where you have provided explicit consent to the processing of your personal data for one or more specific purposes.
• Contractual Necessity – Where processing is necessary to fulfill our contractual obligations with you or to take steps at your request before entering into a contract.
• Legal Obligation – Where processing is necessary to comply with legal obligations to which we are subject.
• Legitimate Interests – Where processing is necessary for our legitimate interests, provided these interests are not overridden by your rights and freedoms.

Data Subject Rights under the GDPR

As a data subject, you have the following rights under the GDPR in relation to your personal data:

• Right to Access – You have the right to request access to the personal data we hold about you and to receive a copy of that data.
• Right to Rectification – You have the right to request the correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure – You have the right to request the deletion of your personal data, subject to certain conditions.
• Right to Restrict Processing – You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability – You have the right to request that we provide your personal data to you in a structured, commonly used, and machine-readable format, and to transfer it to another data controller.
• Right to Object – You have the right to object to the processing of your personal data for certain purposes, such as direct marketing.
• Right to Withdraw Consent – Where processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing before your withdrawal.

To exercise any of your rights, please contact our Data Protection Officer at webmaster@hdcaltd.co.uk.

Data Protection Officer

Our appointed Data Protection Officer (DPO) is responsible for overseeing our data protection activities. If you have any questions or concerns regarding the processing of your personal data or the exercise of your rights under the GDPR, please contact our DPO via email at webmaster@hdcaltd.co.uk.

Transfers of Personal Data

We may transfer your personal data to countries outside the European Economic Area (EEA) that may not offer the same level of data protection as the UK or the EEA. In such cases, we will ensure that appropriate safeguards are in place to protect your personal data, in accordance with the GDPR. This may include the use of standard contractual clauses or other legal mechanisms approved by the Information Commissioner’s Office (ICO).

Data Protection Impact Assessments

Where necessary, we conduct Data Protection Impact Assessments (DPIAs) to evaluate the risks associated with processing activities and to ensure that personal data is processed in compliance with the GDPR. These assessments help us mitigate any potential risks to the rights and freedoms of data subjects.

Changes to this Privacy Statement

This Privacy Statement may be updated from time to time to reflect changes in our practices, legal obligations, or the way we process personal data. Any changes will be communicated appropriately, and the updated Privacy Statement will be posted on our website. The date of the latest update will be indicated at the top of this statement.