GDPR Compliance

Our Commitment to GDPR

ToughBarrow Digital is committed to complying with the General Data Protection Regulation (GDPR) and protecting the rights of individuals in the European Economic Area.

Your Rights Under GDPR

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing of your data

Legal Basis for Processing

We process personal data based on consent, contractual necessity, legal obligations, and legitimate interests.

Data Protection Measures

We implement technical and organizational measures to ensure data security, including encryption, access controls, and regular security audits.

International Data Transfers

When transferring data outside the EEA, we ensure adequate protections through standard contractual clauses and other approved mechanisms.

Data Breach Procedures

In the event of a data breach, we will notify affected individuals and relevant authorities within 72 hours as required by GDPR.

How to Exercise Your Rights

To exercise any of your GDPR rights, contact us at [email protected]. We will respond within 30 days.

Data Protection Officer

For data protection inquiries, contact our Data Protection Officer at [email protected].