GDPR

What is GDPR?

The new EU General Data Protection Regulation (GDPR) came into force on 25 May 2018 (including in the UK regardless of its decision to leave the EU) and impacts on every organisation which holds or processes personal data. It introduced new responsibilities, including the need to demonstrate compliance, more stringent enforcement and substantially increased penalties than the Data Protection Act (DPA) which it superseded.

How has Claritum prepared for it?

Claritum is committed to high standards of information security, privacy and transparency.

We place a high priority on protecting and managing data in accordance with accepted standards and comply with applicable GDPR regulations, as a data processor, while also working closely with our customers and partners to meet contractual obligations for our procedures, products and services.

The company has two main areas of focus for GDPR, overseen by an internal cross-functional team:

1. Building on existing security and business continuity management systems and certifications (including ISO 9001) to ensure our own compliance.
2. Product programmes to support compliance for users of our software applications including solutions to streamline the process and drive greater efficiency.

It is important to recognise that compliance is a shared responsibility and all organisations will need to adapt business processes and data management practices.

Marketing

We have re-wrriten our Privacy Policy to be in plain English and to describe how and where data is managed.

In addition to the usual marketing ‘opt-out’ (which flags contacts as opted out but does not delete), we have provided a ‘removal of consent’ form which alerts us to manually delete the contact’s details.

If people would like access to the information we hold on them, we have provided an ‘information request’ form.

Please take a look at our ‘privacy policy’, which is accessible from all forms on the website