Data Protection Policy

Purpose of this Policy

This policy explains how Dutch Quarter Consultants use, store, and protect personal data in line with the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018 and Data (Use and Access) Act 2025.

The aim of this policy is to ensure that everyone handling personal data is fully aware of their responsibilities and Dutch Quarter Consultants legal obligations under the Data Protection Act 2018 and the General Data Protection Regulation (UK GDPR). It also aims to ensure that personal data is processed, handled, and destroyed in accordance with data protection principles and procedures.

Dutch Quarter Consultants will hold personal data only for as long as necessary and this policy applies to all employees and contractors who have access to personal data within the organisation.

Data-Protection principles

Personal data must be processed in accordance with the following data-protection principles. It must:

be processed fairly, lawfully and transparent.
be collected and processed only for specified, explicit and legitimate purposes.
be adequate, relevant and limited to what is necessary for the purposes for which it is processed.
be accurate and kept up to date. Any inaccurate data must be deleted or rectified without delay.
not be kept for longer than is necessary for the purposes for which it is processed.
be processed securely.

Dutch Quarter Consultants are responsible for ensuring and demonstrating compliance with these principles.

Personal data

Personal data means any information about a living person who can be identified from that data (a data subject) on its own or when taken together with other information which is likely to come into our possession. Examples of personal data include a name, telephone number, address, employee number or photograph and applies to all personal data, whether stored electronically or on paper.

Personal data may be provided by employees, customers, contractors, or enforcement officers. It may also be created during recruitment, onboarding, training or the duration of a contract or relationship with Dutch Quarter Consultants.

Use of personal data

We process the personal data of employees, customers, suppliers and contractors in line with our obligations under the Data Protection Act 2018.
We may collect the following types of personal data:

Contact details (name, email address, phone number)
Employment or service information (if relevant)
Payment or billing information (if relevant)
Any information provided through forms, emails, or our website

How We Use Personal Data

We use personal data to:

Provide our services
Communicate with clients, customers, or staff
Manage accounts, billing, and administration
Meet legal or regulatory obligations

We only use personal data when we have a lawful basis, such as consent, contract, legal obligation, or legitimate interest.

Sharing Personal Data

We do not sell personal data. We may share data with:

Service providers who support our operations (e.g., IT, payment processors)
Regulators or authorities when legally required

All third parties must keep data secure and use it only for agreed purposes.

Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, or unauthorised access. These include:

Secure systems and passwords
Access controls

Data Retention

We keep personal data only for as long as necessary for the purposes it was collected, or as required by law. After this, data is securely deleted or anonymised. (See our Data Retention & Disposal policy for further details)

Your Rights

Individuals have the right to:

Access their personal data
Request correction or deletion
Object to or restrict processing
Withdraw consent (where applicable)
Request data portability

To exercise these rights, contact us at Hello@dutchquarterconsultants.com

Data Breaches

If a data breach occurs that risks individuals’ rights or freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours and inform affected individuals when required.

Contact and Complaints

As set out in the Data (Use and Access) Act 2025 Dutch Quarter Consultants aim to ensure any complaints are handled fairly, consistently and in a timely manner as follows:

We will acknowledge receipt of complaints within 30 days of receiving them;
without undue delay, take appropriate steps to respond to complaints, including making appropriate enquiries, and keep people informed; and
without undue delay, tell people the outcome of their complaints.

If you have questions about this policy or how we handle data, contact: Hello@dutchquarterconsultants.com

If you are not satisfied with our response, you can complain to the ICO: www.ico.org.uk

Policy Review

This policy will be reviewed annually or whenever there are significant changes to legal requirements or business operations.

Completed by Policy Reviewing Officer
Signature: Julie Brotherton
Date: July 2026