1. Purpose
This policy summarises how Radius Tools Limited approaches its responsibilities as a controller of personal data under UK data-protection law. It applies to personal information handled in connection with website enquiries and ordinary business administration.
2. Data-protection principles
We aim to process personal data lawfully, fairly and transparently; collect it for specified and legitimate purposes; keep it adequate, relevant and limited to what is necessary; take reasonable steps to keep it accurate; retain it no longer than necessary; and protect it using appropriate security measures.
3. Lawful processing
Before processing personal data, we consider the relevant purpose and lawful basis. Common bases in our business context may include steps requested before entering a contract, performance of a contract, legal obligations and legitimate interests. Consent is used where it is the appropriate basis.
4. Individual rights
We recognise applicable rights of access, rectification, erasure, restriction, objection and data portability. Rights are not absolute in every situation and may be subject to legal exemptions, contractual requirements or record-retention obligations.
5. Subject access requests
Requests for access to personal data should be sent to hello@radiustools.co.uk. We will assess the scope of the request, locate relevant information and respond within the timescale required by law, subject to any permitted extension for complex or numerous requests.
6. Identity verification
Where necessary, we may ask for proportionate information to confirm that a person making a request is entitled to receive the requested data. We will not request more information than reasonably necessary for that purpose.
7. Accuracy and rectification
If we become aware that personal information is materially inaccurate or incomplete, we will take reasonable steps to correct it. Individuals may contact us to request correction of information relating to them.
8. Erasure and restriction
Requests to erase or restrict processing will be considered against the purpose of the processing, our lawful basis and any obligation or legitimate need to retain the information, including legal, accounting and dispute-related requirements.
9. Objection and portability
Where the law provides a right to object, we will consider the circumstances and whether compelling legitimate grounds require continued processing. Data portability applies only to certain processing carried out by automated means on the basis of consent or contract.
10. Automated decision-making
We do not use website enquiry information to make decisions based solely on automated processing that produce legal or similarly significant effects.
11. Data minimisation and retention
We aim to collect only information reasonably necessary for the relevant business purpose. Retention periods are determined by the type of record, the relationship involved and any applicable legal, tax, accounting, contractual or dispute-related requirement.
12. Security and access
Access to personal information should be limited to people and service providers who need it for a legitimate business purpose. We use proportionate technical and organisational controls intended to reduce the risk of accidental loss, unauthorised access, alteration or disclosure.
13. Personal-data breaches
If a personal-data breach is identified, we will assess the nature of the incident, the data involved, the likely consequences and the appropriate containment and remediation steps. Where legally required, we will notify the ICO and affected individuals within the applicable timescales.
14. Processors and suppliers
Where a third party processes personal data on our behalf, we seek to use suppliers that provide suitable assurances regarding security and data protection and to put appropriate contractual terms in place where required.
15. Accountability and review
We keep our data-protection approach under review and may update this policy as our systems, suppliers or processing activities change. Questions about this policy can be sent to hello@radiustools.co.uk.