Data Protection

Data Protection Readiness Statement

Our Commitment to Data Protection

Claybrook Ltd are actively working to comply with the Data Protection Act 2018 and other related privacy regulations. We understand and embrace our role as a Data Controller of personal data. We also recognise that compliance is a continual journey and we are constantly refining our measures, processes and documentation to improve how we process personal data.

This statement will be regularly maintained and will be available on request to those organisations that rely on our compliance to be compliant themselves.

This is a confidential statement of our compliance position with regards to the Data Protection Act and would ask that it is only shared as evidence of your own compliance.

What we have done

  • Undertaken a comprehensive assessment of all aspects of Data Protection against our business
  • Reviewed the gap analysis and prioritised the required actions
  • Completed a data discovery process and produced a data map of personal data
  • Reviewed our need for a DPO and decided not to appoint
  • Published a Privacy Notice wherever personal data is collected which can be viewed here
  • Ensured that Claybrook Ltd is registered correctly with the ICO
  • Reviewed supplier and customer contracts
  • Trained key staff on the requirements of the Data Protection Act and their role in personal data protection
  • Reviewed and updated our data policy collection
  • Reviewed data storage and applied revised retention policy
  • Implemented organisational and technical measures to address priority vulnerablities, including
    • data protection and other policies
    • technical IT security

Continuous Improvement

Work is planned for these improvement activities:

  • Introduce regular organisational and technical measure reviews - NB new Data Protection legislation due later in 2025
  • Improve documentation of processes and procedures
  • Further improve Organisational and Technical measures
  • Improve transparency of processing through better communication

Key contacts

The personnel accountable for the protection of personal data are:

 

David Sykes

Matt Capps

Dated: April 2026