GDPR Compliance

Our GDPR Commitment

Sparky Funds IT is fully committed to compliance with the General Data Protection Regulation (GDPR). We implement robust technical and organizational measures to ensure the security and privacy of all personal data we process.

Legal Basis for Processing

We process personal data under the following legal bases: consent (for marketing communications), contract performance (to provide services), legal obligation (to comply with laws), and legitimate interests (to operate our business efficiently).

Your GDPR Rights

Under GDPR, you have the following rights:

• Right to be informed about data collection and use
• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ('right to be forgotten')
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, contact us at [email protected].

Data Security Measures

We protect your data through: encryption of data in transit and at rest, access controls and authentication, regular security audits, staff training on data protection, and incident response procedures.

International Data Transfers

Personal data is primarily stored and processed within the UK and EU. Any transfers outside these regions are protected by appropriate safeguards such as Standard Contractual Clauses.

Supervisory Authority

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit ico.org.uk for more information.