Data Protection Policy

1. Purpose

This policy sets out how Claimsplanet meets its obligations under UK GDPR and the Data Protection Act 2018 when processing personal data on the claims platform.

2. Principles

• Lawfulness, fairness and transparency in all processing.
• Purpose limitation — data is used for the claim it was collected for.
• Data minimisation — we collect what the claim needs, no more.
• Accuracy — data subjects can have inaccurate data corrected.
• Storage limitation — retention only as long as required.
• Integrity and confidentiality — security measures below.

3. Security measures

Data is encrypted in transit and at rest; access is authenticated and role-based; evidence is date- and location-stamped at capture; network members are vetted; and platform activity is logged in an audit trail.

4. Processors and transfers

Service providers process data only under contract and on our instructions. Where data is transferred internationally, appropriate safeguards are applied.

5. Breach response

Suspected personal-data breaches are contained, assessed and — where required — reported to the ICO within 72 hours and to affected individuals without undue delay.

6. Rights and contact

Requests to exercise data-subject rights are handled within statutory timescales. Contact: enquiries@claimsplanet.com · 23 The Drive, London E4 7AJ.