GDPR & Data Privacy Rights

Your Data Protection Rights

Under UK GDPR (General Data Protection Regulation), you have several important rights regarding your personal data. HzPro is committed to protecting these rights and ensuring transparency in how we handle your information.

• Right to be informed: You have the right to know how your personal data is being used, stored, and shared.
• Right of access: You can request a copy of all personal data we hold about you.
• Right to rectification: You can ask us to correct or update inaccurate personal data.
• Right to erasure: You can request that we delete your personal data ("right to be forgotten").
• Right to restrict processing: You can limit how we use your personal data in certain circumstances.
• Right to data portability: You can request your personal data in a structured, commonly used format.
• Right to object: You can object to certain types of processing, including direct marketing.
• Rights related to automated decision-making: Protection against decisions made solely by automated processing.

How We Process Your Personal Data

HzPro processes your personal data lawfully and transparently. Here's what we collect and why:

How to Exercise Your Rights

You can exercise your GDPR rights at any time by contacting us through the methods below. We will respond to valid requests within 30 days (or 90 days for complex requests).

Data Protection Officer

HzPro has appointed a Data Protection Officer (DPO) to oversee our data protection compliance and serve as your primary contact for privacy matters.

Right to Lodge a Complaint

If you're not satisfied with how we've handled your personal data or privacy concerns, you have the right to lodge a complaint with the UK's supervisory authority.

How We Protect Your Data

HzPro implements robust security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data is encrypted in transit and at rest using industry-standard protocols.
• Access Controls: Strict role-based access controls limit data access to authorized personnel only.
• Regular Audits: We conduct regular security audits and vulnerability assessments.
• Staff Training: All team members receive regular data protection and security training.
• Incident Response: We have comprehensive procedures for detecting and responding to data breaches.
• Third-Party Security: All service providers are carefully vetted and contractually bound to protect your data.

Data Breach Procedures

In the unlikely event of a data breach that poses a high risk to your rights and freedoms, HzPro will:

• Notify the ICO within 72 hours of becoming aware of the breach
• Inform affected users without undue delay if the breach poses a high risk
• Provide clear information about what happened and what we're doing about it
• Offer guidance on steps you can take to protect yourself
• Implement additional security measures to prevent similar incidents

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will:

• Notify you via email if you have an account with us
• Update the "Last Updated" date at the bottom of this page
• Provide a summary of key changes in our privacy notices