Data Protection Policy
Last Updated: May 2026
1. Policy Statement
RG SERVICES PROPERTY LTD is committed to ensuring that all personal data is handled securely, lawfully, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.
2. Purpose
This policy outlines how RGS Properties manages personal data to:
- Protect individuals' rights
- Ensure compliance with legal obligations
- Maintain trust and confidentiality
- Reduce data security risks
3. Scope
This policy applies to:
- Employees
- Contractors
- Clients
- Tenants
- Suppliers
- Website users
- Third-party service providers
4. Data Protection Principles
We process personal data in accordance with the following principles:
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimisation
- Accuracy
- Storage limitation
- Integrity and confidentiality
- Accountability
5. Types of Data Processed
We may process:
- Identification details
- Contact information
- Property and tenancy records
- Financial information
- Communication records
- Technical and website usage data
6. Data Security Measures
RGS Properties implements:
- Secure systems and passwords
- Access controls
- Staff confidentiality obligations
- Secure cloud storage
- Data encryption where appropriate
- Regular monitoring and updates
7. Data Sharing
Personal data may only be shared:
- Where legally required
- With authorised service providers
- For contractual purposes
- Under secure and confidential arrangements
8. Data Retention
Personal data will only be retained for as long as necessary to fulfil legal, contractual, or operational requirements.
9. Data Subject Rights
Individuals have the right to:
- Access their data
- Request corrections
- Request deletion
- Restrict processing
- Object to processing
- Lodge complaints with the ICO
10. Data Breaches
Any suspected data breach will be:
- Investigated promptly
- Recorded internally
- Reported where legally required
- Managed to minimise risk and impact
11. Staff Responsibilities
All staff and contractors are responsible for:
- Protecting confidential information
- Following data protection procedures
- Reporting potential breaches immediately