GDPR Data Protection Policy

Effective Date: 27 August 2026

1. Data Controller & Processor Information

Data Controller (Your Business): You determine the purpose and means of processing

Data Processor: DAG Fulfilment

Registered Address: Suite 696, 80a Ruskin Ave, Dartford, DA16 3QQ, United Kingdom

Contact: info@dagfulfilment.co.uk

2. Legal Basis for Processing (Article 6 GDPR)

• Contract: Processing is necessary to perform fulfillment services
• Legal Obligation: Tax retention, shipping regulations, fraud prevention
• Legitimate Interest: Operational efficiency, security, service improvement

3. Data Retention (Article 5)

• Customer transaction data: 6 years (UK tax requirements)
• Order fulfillment records: 2 years
• Communications/logs: 1 year
• Longer retention only if required by law or active legal claim

4. International Transfers

We do NOT transfer data outside the UK/EU except through Standard Contractual Clauses (SCCs) where necessary for shipping carriers or payment processors. Details available on request.

5. Data Subject Rights (Chapter 3, GDPR)

Individuals have the right to:

• Access (Art 15): Copy of their data within 30 days
• Correction (Art 16): Rectify inaccurate data
• Erasure (Art 17): Delete data ('right to be forgotten') unless retention required
• Restrict Processing (Art 18): Limit how data is used
• Portability (Art 20): Receive data in machine-readable format
• Object (Art 21): Opt out of processing
• Not be subject to automated decisions (Art 22): Right to human review

6. Data Breach Notification

In case of data breach:

• We notify you without undue delay (≤72 hours)
• We provide details of affected data, likely impact, and mitigation measures
• You are responsible for notifying affected individuals if risk is high
• We assist in ICO notification if required

7. Compliance & Audits

We maintain detailed records of processing activities and conduct annual security audits. Clients may request audit reports on reasonable notice.

8. Sub-Processors & Transfers

We use sub-processors for shipping (carriers), payments, and cloud services. You will be notified of any new sub-processors or changes. You have the right to object on reasonable grounds.

9. Complaints & Contact

For data protection inquiries or complaints, contact info@dagfulfilment.co.uk

For unresolved complaints, contact the ICO: www.ico.org.uk

Contact: info@dagfulfilment.co.uk | 07796 596942

Registered office: Suite 696, 80a Ruskin Ave, Dartford, DA16 3QQ, United Kingdom

Trading address: Swansea, Wales, United Kingdom