There are 8 Data Protection Principles that govern the way we can use your Personal Data. They are:
1. Personal Data shall be processed fairly and lawfully.
2. Personal Data shall be obtained only for one or more specified and lawful purposes and shall not be processed in a manner different to those purposes.
3.Personal Data shall be adequate, relevant and not excessive in relation to the purpose for which it is processed.
4. Personal Data shall be accurate and where necessary kept up to date.
5. Personal Data processed for any purpose shall not be kept for longer than is necessary for that purpose.
6. Personal Data shall be processed in accordance with the Rights of the Data Subject.
7. Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of Personal Data and against accidental loss, destruction, or damage to Personal Data.
8. Personal Data shall not be transferred to a country outside of the European Economic Area, unless that country ensures an adequate level of protection for the rights and freedoms of the data subjects in relation to the processing of Personal Data.