Data protection policy

Last Updated: April 15th 2025

1. Introduction

Loose Connections Ltd is committed to protecting the privacy and security of personal data. This policy outlines our obligations and procedures for handling personal data in compliance with relevant data protection legislation, including the General Data Protection Regulation (GDPR).

2. Scope

This policy applies to all personal data processed by Loose Connections Ltd in the course of providing website design and development, web hosting, domain name hosting, digital marketing, social media marketing and management, and Search Engine Optimisation (SEO) services, including Google Analytics, Google Search Console, and Google Adwords.

3. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person.
• Data Controller: The entity that determines the purposes and means of processing personal data.
• Data Processor: The entity that processes personal data on behalf of the Data Controller.
• Data Subject: The individual to whom the personal data relates.
• Processing: Any operation performed on personal data, such as collection, storage, use, and deletion.

4. Data Protection Principles

Loose Connections Ltd adheres to the following principles when processing personal data:

• Lawfulness, Fairness, and Transparency: Personal data shall be processed lawfully, fairly, and in a transparent manner.
• Purpose Limitation: Personal data shall be collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
• Data Minimisation: Personal data shall be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
• Accuracy: Personal data shall be accurate and, where necessary, kept up to date.
• Storage Limitation: Personal data shall be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
• Integrity and Confidentiality: Personal data shall be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage.

5. Data Subject Rights

Data subjects have the following rights regarding their personal data:

• Right to Access: Data subjects can request access to their personal data.
• Right to Rectification: Data subjects can request correction of inaccurate or incomplete personal data.
• Right to Erasure: Data subjects can request the deletion of their personal data under certain conditions.
• Right to Restrict Processing: Data subjects can request the restriction of processing of their personal data under certain conditions.
• Right to Data Portability: Data subjects can request to receive their personal data in a structured, commonly used, and machine-readable format.
• Right to Object: Data subjects can object to the processing of their personal data under certain conditions.

6. Data Security

Loose Connections Ltd implements appropriate technical and organisational measures to ensure the security of personal data, including:

• Encryption: Encrypting personal data to protect it from unauthorised access.
• Access Controls: Restricting access to personal data to authorised personnel only.
• Regular Audits: Conducting regular audits to ensure compliance with data protection policies and procedures.

7. Data Breach Notification

In the event of a data breach, Loose Connections Ltd will notify the relevant supervisory authority and affected data subjects without undue delay, in accordance with GDPR requirements.

8. Data Processing Agreements

Loose Connections Ltd will enter into data processing agreements with all third-party service providers who process personal data on our behalf, ensuring they comply with GDPR requirements.

9. Contact Information

For any questions or concerns regarding this policy or the processing of personal data, please contact:

Loose Connections Ltd
info@looseconnection.uk