1. Introduction

This Data Protection Policy outlines the principles and practices adopted by Identity Gram to ensure the protection, privacy, and security of personal data collected and processed through our services. We are committed to safeguarding the rights and interests of individuals whose data we collect and process.

2. Scope

This policy applies to all personal data collected, stored, processed, and shared by Identity Gram through its platform, services, and interactions with users, clients,and partners.

3. Data Collection and Processing

We collect and process personal data for the purpose of identity verification and improving our services. We ensure that all data collected is:

• Obtained lawfully and fairly.

• Collected for specified, explicit, and legitimate purposes.

• Adequate, relevant, and limited to what is necessary.

• Accurate and kept up to date.

• Retained only for as long as necessary.

4. Data Security

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. This includes encryption, access controls, regular security assessments, and staff training.

5. Data Sharing and Transfers

We may share personal data with third-party service providers for the purpose of providing our services. All third parties are selected with care and are contractually bound to maintain the confidentiality and security of the data. Data transfers outside of your jurisdiction will be done in compliance with applicable data protection laws.

6. User Rights

Individuals have the following rights regarding their personal data:

• Right to Access:

  Individuals can request information about their personal data that we hold.

• Right to Rectification:

  Individuals can request corrections to inaccurate or incomplete data.

• Right to Erasure:

  Individuals can request the deletion of their personal data.

• Right to Restriction:

  Individuals can request the restriction of processing under certain circumstances.

• Right to Data Portability:

  Individuals can request their personal data in a structured, commonly used, and machine-readable format

• Right to Object:

  Individuals can object to the processing of their data for specific purposes.

7. Data Breach Management

In the event of a data breach, we will promptly assess the situation, mitigate the impact, and notify affected individuals and authorities as required by law.

8. Compliance and Accountability

We adhere to applicable data protection laws and regulations. Our staff is trained on data protection principles and their responsibilities under this policy.

9. Updates to this Policy

This Data Protection Policy may be updated periodically to reflect changes in our practices, legal requirements, and industry standards. The most recent version will always be available on our website.

10. Contact Information

If you have any questions, concerns, or requests related to data protection, please contact our Data Protection Officer at Info@identitygram.co.uk