The UK General Data Protection Regulation (UK GDPR) is a law that governs how UK organisations and some non-UK organisations process personal data...

Fixflo works hard to ensure that we are UK GDPR compliant. We have been advised by and have followed the advice of an external legal Counsel a...

A data controller is a person who determines the purposes and means of processing personal data. This means that the data controller decides who to ...

A data processor provides a service; they receive data from the data controller, process it and then generate output. This means that the data pro...

A Data Protection Impact Assessment (DPIA) is designed to assist organisations in identifying, assessing, mitigating, or minimising privacy risks wit...

This statement explains how the personal data of data subjects is used through the Fixflo system. We have produced this to help our clients with th...

Under the UK GDPR, if a business wants to process personal data it can only do so if it can satisfy at least one of the conditions provided. These...

We have relatively sophisticated controls and processes in place. A copy of our IT and data protection policy can be provided on request.

As the basis for processing personal data is legitimate interests and not consent (see guide here), you do not need the occupier’s consent to send...

We sure do! Gurdeep Clair is our Data Protection Officer and can be contacted via [email protected].