Data Protection at EasyPeasy
Data Protection Principles
We ensure the protection of your data by focusing on three key dimensions:
- Data Minimisation: We only store necessary information, as provided by you.
- Secure Storage: Your data is encrypted both at rest and in transit. Our storage processes are designed for maximum security, as detailed in our security measures.
- Access Control: We have robust internal access controls. Our team members can access data only under specific conditions and after thorough security checks. You can also set account roles within our software to restrict access to sensitive information.
We comply with the General Data Protection Regulation (GDPR) and have a designated Data Protection Officer to ensure accountability and privacy are embedded in our software and policies. Our compliance measures include:
- Full awareness of data locations, ensuring compliance even outside the EU.
- Restricting data access to necessary personnel and protecting against unauthorised access.
- Enabling you to edit, update, delete and export any information we hold.
- Obtaining consent during sign-up and allowing its withdrawal at any time.
You can review the exact standards we hold ourselves to via our Privacy Policy.
For any concerns, you can contact our Data Protection Officer.
Frequently asked questions
Are you compliant with the GDPR?
Who is the official Data Protection officer for your organisation?
Do you market other services to registered users who join EasyPeasy?
How long do you retain our data?
Where is our Personally identifiable information (PII) data held?
Do you have a training programme in place for staff who have access to our user's personal data?
If we were to ask you to remove all data we have provided you would you be able to do that in a timely fashion?
Do you have a process in place for reporting personal data breaches?
Do you have a security policy?
Do you have a Data Protection Impact Assessment?
