GDPR

All Datagroup services including transportation, scanning, storage, destruction and electronic data transfer are carried out in our controlled environment.  All client information is processed under the guidance of our ISO 27001:2013 Information Security & ISO 9001:2015 Quality Management based policies and procedures and in full compliance with GDPR.  All actions and duties carried out on your behalf are in compliance with GDPR incorporating the eight rules:

1. Obtain and process information fairly
2. Keep it only for one or more specified, explicit and lawful purposes
3. Use and disclose it only in ways compatible with these purposes
4. Keep it safe and secure
5. Keep it accurate, complete and up-to-date
6. Ensure that it is adequate, relevant and not excessive
7. Retain it for no longer than is necessary for the purpose or purposes
8. Give a copy of his/her personal data to an individual, on request

We have a Data Protection Policy and a Security Policy that encompasses all aspects of confidentiality.