Public policy statement
Data Protection Policy
WHH is committed to processing personal information lawfully, fairly, transparently and securely, while respecting the rights of employees, customers, suppliers, partners and other individuals.
Our commitments
Collect and use only the personal information needed for clear and legitimate purposes and identify an appropriate lawful basis. Limit access to people who need information for their work and protect paper and electronic records with suitable organisational and technical controls. Keep information accurate, retain it only for as long as necessary and dispose of it securely.
Maintain appropriate records of processing and assess high-risk changes through data protection impact assessments where required. Record, contain and assess suspected personal-data breaches and notify the Information Commissioner's Office and affected individuals where legally required. Respond to valid data-rights requests without undue delay and within the timescales required by law.
Responsibility
The Commercial Manager carries internal responsibility for data-protection matters. Managers are responsible for appropriate handling within their teams, and everyone working for WHH must follow the policy and report suspected breaches immediately.
This is a concise public statement of WHH's policy commitments. The controlled internal policy, supporting procedures, records and approval status are maintained separately within the WHH management system.
Back to all policies ←