17.1 The Owners are required to gather certain personal data about clients for the purposes of satisfying operational and legal obligations. This personal data will be subject to the appropriate legal safeguards as specified in the Data Protection Act 2018.
17.2The Owners fully endorse and adhere to the eight principles of the Data Protection Act. These principles specify the legal conditions that must be satisfied in relation to obtaining, handling, processing, transportation and storage of personal data.
17.3The principles require that the personal data shall:
17.3.1Be processed fairly and lawfully purpose and shall not be processed in any manner incompatible with that purpose;
17.3.2 Be obtained for a specified and lawful purpose and shall be processed in any manner incompatible with that purpose; .
17.3.3 Be adequate, relevant and not excessive for those purposes;
17.3.4Be accurate and, where necessary, kept up to date;
17.3.5 Not to be kept for longer than is necessary for that purpose;
17.3.6 Be processed in accordance with the data subject’s rights;17.3.7 Be kept secure from unauthorized or unlawful processing and protected against accidental loss, destruction, or damage by using the appropriate technical and organisational measures;