Data Protection

PURE People Profiling is committed to protecting personal data in line with UK and EU law, including the UK GDPR, the EU GDPR, and the Data Protection Act 2018. This page sets out how we apply those rules in general terms. For how we use personal data in practice, see our Privacy Policy.

Principles we follow

• Use personal data lawfully, fairly, and in a way people can understand.
• Collect it for specified, legitimate purposes and not use it in ways that conflict with those purposes.
• Keep it relevant and limited to what is needed.
• Take reasonable steps to keep it accurate and up to date.
• Keep it no longer than necessary.
• Protect it with appropriate technical and organisational measures.
• Be able to show that we meet these duties.

Roles

When we decide why and how personal data is used (for example our own website and the My Pure accounts we operate), we act as a controller. When a business customer instructs us to process data for their organisation, we act as a processor and process only on their documented instructions, unless the law requires otherwise.

Security

We use access controls, encrypted connections where the service is offered over HTTPS, hashed passwords, and least-privilege access for people who support the service. No method of transmission or storage is completely secure. We review our measures from time to time.

People who process data for us

We use service providers only where they provide sufficient guarantees and are bound by a written contract that meets UK and EU requirements, including confidentiality, security, and deletion or return of data when the work ends.

Children

Our services are intended for use by adults in a work or professional context. We do not knowingly collect personal data from children.

Personal data breaches

If we become aware of a breach that is likely to result in a risk to people’s rights and freedoms, we will notify the relevant supervisory authority and, where the law requires it, the affected people, without undue delay.

Requests

You can ask us about your data using the contact options on our website. We may need to confirm your identity before we respond. We aim to reply within one month, or to explain if we need more time where the law allows.

If you are not satisfied, you can complain to the UK Information Commissioner’s Office or to your local EU supervisory authority.