Introduction
TLC Online (“we,” “our,” or “us”) is committed to protecting the personal data of our users, customers, and employees. This Data Protection Policy outlines our practices and procedures for ensuring the confidentiality, integrity, and availability of personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2 Scope
This policy applies to all employees, contractors, and third-party service providers who handle personal data on behalf of TLC Online. It covers all personal data collected, processed, stored, and shared by the organization.
3 Data Protection Principles
We adhere to the following data protection principles as outlined in the UK GDPR:
3.1 Lawfulness, Fairness, and Transparency
Personal data shall be processed lawfully, fairly, and in a transparent manner.
3.2 Purpose Limitation
Personal data shall be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
3.3 Data Minimization
Personal data shall be adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
3.4 Accuracy
Personal data shall be accurate and, where necessary, kept up to date. Inaccurate data shall be erased or rectified without delay.
3.5 Storage Limitation
Personal data shall be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.
3.6 Integrity and Confidentiality
Personal data shall be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage.
4 Data Collection
We collect personal data through various means, including our website, customer interactions, and employment processes. The types of personal data we collect may include:
- Name
- Contact details (e.g., email address, phone number)
- Payment information
- IP address
- Employment information
5 Data Processing
We process personal data for the following purposes:
- Providing and managing our services
- Processing transactions and payments
- Communicating with customers and responding to inquiries
- Marketing and promotional activities
- Compliance with legal obligations
- Employment and HR management
6 Data Storage and Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or damage. These measures include:
- Encryption of sensitive data
- Access controls and authentication mechanisms
- Regular security audits and vulnerability assessments
- Data backup and disaster recovery procedures
7 Data Sharing and Disclosure
We may share personal data with third-party service providers who assist us in operating our business. We ensure that these third parties adhere to data protection standards equivalent to our own. We may also disclose personal data if required by law or in response to legal requests.
8 Data Subject Rights
Data subjects have the following rights regarding their personal data:
- Right to Access: Request access to their personal data.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of their personal data, subject to certain legal obligations.
- Right to Restrict Processing: Request restriction of processing of their personal data.
- Right to Data Portability: Request transfer of their personal data to another organization.
- Right to Object: Object to the processing of their personal data for direct marketing purposes.
To exercise any of these rights, data subjects can contact us at webteam@tlc-online.co.uk
9 Data Breaches
In the event of a data breach, we will promptly assess the risk to data subjects and, if required, report the breach to the Information Commissioner’s Office (ICO) within 72 hours. We will also notify affected data subjects if the breach is likely to result in a high risk to their rights and freedoms.
10 Training and Awareness
We provide regular training to our employees on data protection principles and practices. Employees are required to adhere to this policy and report any potential data protection issues to their supervisor or the Data Protection Officer (DPO).
11 Data Protection Officer
We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection strategy and ensuring compliance with the UK GDPR. The DPO can be contacted at webteam@tlc-online.co.uk
12 Review and Updates
This policy is reviewed annually and updated as necessary to reflect changes in our practices or legal requirements. The latest version of this policy will be posted on our website.
Contact Us
If you have any questions or concerns about this Data Protection Policy or our data protection practices, please contact us at:
TLC Online
35 Tristan Close,
Calshot,
Southampton,
Hampshire
SO45 1BN
Our Main phone number is: 023 8024 3044
By using our services, you acknowledge that you have read and understood this Data Protection Policy and agree to its terms and conditions.
Updated on: 12-04-2025
