Protection of Personal Data Through GDPR
At Xpert Finance, protecting the privacy and confidentiality of our clients’ personal information is a top priority. We are committed to handling personal data responsibly and in compliance with the General Data Protection Regulation (GDPR) and UK data protection laws.
What is GDPR?
The General Data Protection Regulation (GDPR) is a legal framework introduced by the European Union to strengthen the protection of personal data for individuals. It came into effect on 25 May 2018 and applies to organisations that collect, store, or process personal information of individuals within the EU and the United Kingdom.
The regulation ensures that individuals have greater control over their personal information and requires businesses to maintain high standards of data protection and transparency.
Our Commitment to Data Protection
Xpert Finance takes the protection of personal data seriously. We implement strong internal procedures and security systems to ensure that all personal information is processed lawfully, fairly, and transparently.
Our data protection measures include:
- Secure storage of personal and financial data
- Restricted access to sensitive information
- Regular security monitoring and updates
- Use of trusted and compliant service providers
- Secure communication systems
Who Processes the Data We Collect?
To provide our services efficiently, we may share certain information with trusted service providers and professional partners. These may include accounting software providers, secure cloud storage services, or other professional platforms necessary to deliver our services.
Whenever third parties process personal data on our behalf, we ensure that they operate under strict contractual agreements that require full compliance with GDPR regulations. This ensures that your personal information receives the same level of protection outside our organisation as it does within it.
Your Rights Under GDPR
Under data protection regulations, individuals have several rights regarding their personal information.
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data where applicable.
- Right to Restrict Processing: Limit how your data is used in certain circumstances.
- Right to Data Portability: Request transfer of your data in a structured format.
- Right to Object: Object to certain types of data processing activities.
Data Retention
We retain personal data only for as long as necessary to fulfil our legal, professional, and regulatory obligations. Once the data is no longer required, it is securely deleted or anonymised in accordance with applicable regulations.
Contact Regarding Data Protection
If you have any questions regarding how your personal information is processed or protected, you may contact our team. We are committed to transparency and ensuring that your privacy rights are respected at all times.