DATA PROTECTION POLICY

BLUE SCRIPT DESIGNS

Data Protection Policy

Version: 1.0

Effective Date: 6 August 2026

Last Reviewed: 6 August 2026

Next Scheduled Review: 6 August 2027

Data Protection Policy

1. Introduction

Blue Script Designs is committed to protecting the privacy, confidentiality and security of personal data. We recognise that responsible handling of personal information is essential to maintaining the trust of our clients, employees, suppliers, business partners and website users.

As a provider of digital services, we process personal data in the course of delivering our services. We are committed to ensuring that all personal information is processed lawfully, fairly, securely and transparently in accordance with applicable data protection legislation.

This Data Protection Policy outlines the principles and procedures that guide how personal data is collected, used, stored, protected and disposed of throughout our business.

2. Purpose

The purpose of this policy is to:

Protect personal information.
Ensure compliance with UK data protection legislation.
Promote responsible handling of personal data.
Reduce the risk of data breaches.
Define responsibilities for handling information.
Maintain public confidence in our services.
Support secure business operations.

3. Scope

This policy applies to:

Employees.
Directors.
Contractors.
Freelancers.
Consultants.
Temporary workers.
Suppliers handling personal data on our behalf.
Any individual processing personal information for Blue Script Designs.

It applies to all personal data regardless of whether it is held electronically, digitally or in paper format.

4. Legal Framework

Blue Script Designs processes personal data in accordance with applicable legislation, including:

UK General Data Protection Regulation (UK GDPR).
Data Protection Act 2018.
Privacy and Electronic Communications Regulations (PECR), where applicable.
Other relevant UK legislation relating to privacy and information security.

We monitor legal developments and review our policies to ensure ongoing compliance.

5. Our Data Protection Principles

Blue Script Designs is committed to processing personal data in accordance with the following principles:

Lawfulness, Fairness and Transparency

Personal data will be processed lawfully, fairly and transparently.

Purpose Limitation

Information will only be collected for specified, legitimate and lawful purposes.

Data Minimisation

Only the personal information necessary for business purposes will be collected and processed.

Accuracy

Reasonable steps will be taken to ensure personal information remains accurate and up to date.

Storage Limitation

Personal information will only be retained for as long as reasonably necessary or as required by law.

Integrity and Confidentiality

Appropriate technical and organisational measures will be used to protect personal information against unauthorised access, loss, destruction or disclosure.

Accountability

Blue Script Designs accepts responsibility for complying with applicable data protection legislation and demonstrating that compliance.

6. Categories of Personal Data

Depending on the services provided, we may process information including:

Names.
Business names.
Job titles.
Email addresses.
Telephone numbers.
Billing information.
Website enquiries.
Customer account information.
Marketing preferences.
Technical information relating to our services.

Where appropriate, processing activities are limited to information necessary for the services being provided.

7. Lawful Basis for Processing

Personal data will only be processed where a lawful basis exists.

Depending on the circumstances, this may include:

Consent.
Performance of a contract.
Compliance with legal obligations.
Legitimate business interests.
Protection of vital interests.
Public interest where applicable.

We will identify and document the appropriate lawful basis for our processing activities.

8. Individual Rights

Blue Script Designs respects the rights of individuals under UK data protection legislation.

Where applicable, individuals may have the right to:

Be informed.
Access their personal information.
Request correction of inaccurate data.
Request deletion of personal information.
Restrict processing.
Object to processing.
Request portability of certain data.
Withdraw consent where processing is based on consent.
Lodge a complaint with the Information Commissioner's Office (ICO).

Requests will be considered and responded to in accordance with applicable legal requirements.

9. Information Security

Protecting personal information is a key priority.

Blue Script Designs implements appropriate technical and organisational measures which may include:

Secure password management.
Multi-factor authentication where appropriate.
Encrypted communications where available.
Secure cloud-based storage.
Restricted access to information.
Device security measures.
Software updates and patch management.
Secure backups.
Malware protection.

Security measures are reviewed periodically to reflect changing risks and technological developments.

10. Access Control

Access to personal information is limited to individuals who require it for legitimate business purposes.

Blue Script Designs seeks to ensure that:

Access permissions are appropriately managed.
Confidential information is protected.
User accounts are controlled.
Access rights are reviewed periodically.
Former personnel no longer retain access to company systems.

11. Confidentiality

Employees, contractors and anyone working on behalf of Blue Script Designs are expected to maintain the confidentiality of personal information.

Confidential information must not be:

Shared without proper authorisation.
Accessed unnecessarily.
Used for personal benefit Disclosed unlawfully.

Confidentiality obligations continue after employment or contractual relationships end.

12. Data Retention

Blue Script Designs will retain personal information only for as long as necessary to:

Deliver contracted services.
Meet legal obligations.
Resolve disputes.
Maintain business records.
Protect legitimate business interests.

Once information is no longer required, it will be securely deleted, anonymised or destroyed where appropriate.

13. Data Sharing

Personal information will only be shared where there is a lawful basis for doing so.

Where necessary, information may be shared with:

Professional advisers.
Technology providers.
Hosting providers.
Payment service providers.
Government authorities where legally required.
Approved business partners acting on our instructions.

Where third parties process personal data on our behalf, we seek to ensure appropriate contractual safeguards are in place.

14. International Data Transfers

Where personal data is transferred outside the United Kingdom, Blue Script Designs will take appropriate steps to ensure that such transfers comply with applicable data protection legislation.

Appropriate safeguards may include:

Adequacy regulations.
International data transfer agreements.
Standard contractual clauses.
Other lawful transfer mechanisms recognised under UK law.

15. Data Breaches

Blue Script Designs takes data breaches seriously.

Where a personal data breach occurs, we will:

Investigate the incident promptly.
Contain and minimise any impact.
Assess potential risks.
Maintain appropriate records.
Notify affected individuals where legally required.
Notify the Information Commissioner's Office (ICO) where required by law.
Review procedures to reduce the likelihood of recurrence.

16. Employee Responsibilities

Everyone handling personal information on behalf of Blue Script Designs is expected to:

Follow this policy.
Protect confidential information.
Report suspected data breaches immediately.
Use secure systems appropriately.
Maintain strong passwords.
Avoid unauthorised disclosure.
Complete relevant training where required.
Handle personal data responsibly.

Failure to comply with this policy may result in appropriate action.

17. Training and Awareness

Blue Script Designs recognises that effective data protection depends upon awareness and good practice.

Where appropriate, employees and representatives may receive guidance covering:

UK GDPR principles.
Secure handling of personal information.
Cyber security awareness.
Password security.
Phishing awareness.
Data breach reporting.
Confidentiality obligations.

Training may be reviewed periodically as the business develops.

18. Monitoring and Compliance

Blue Script Designs will periodically review its data protection arrangements to:

Assess compliance.
Improve security.
Review procedures.
Monitor emerging risks.
Respond to legislative changes.
Strengthen governance.

Continuous improvement forms part of our approach to information governance.

19. Related Policies

This Data Protection Policy should be read alongside our:

Privacy Policy.
Cookie Policy.
Information Security Policy.
Website Terms & Conditions.
Employment Policy.
Accessibility Statement.
Supplier Code of Conduct.
Complaints Handling Procedure.

Together, these policies support Blue Script Designs' commitment to responsible information management and regulatory compliance.

20. Policy Review

This policy will be reviewed annually, or sooner where required, to reflect:

Changes in legislation.
Regulatory guidance.
Technological developments.
Business operations.
Information security risks.

The latest version will always be available on our website.

21. Contact Us

If you have any questions regarding this Data Protection Policy or wish to exercise your data protection rights, please contact:

Blue Script Designs

Website:

[www.bluescriptdesigns.co.uk] (http://www.bluescriptdesigns.co.uk)

Email:

[info@bluescriptdesigns.co.uk] (mailto:info@bluescriptdesigns.co.uk)

If you remain dissatisfied with our response, you may have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Appendix A – Our Data Protection Principles

Blue Script Designs is guided by the following principles:

Lawfulness

We only process personal information where a lawful basis exists.

Transparency

We explain clearly how personal information is collected and used.

Security

We implement appropriate technical and organisational measures to protect personal information.

Confidentiality

We safeguard information against unauthorised access or disclosure.

Accountability

We accept responsibility for maintaining compliance with data protection legislation.

Continuous Improvement

We regularly review our policies, systems and procedures to strengthen information security.

Appendix B – Good Data Protection Practices

Everyone working with or for Blue Script Designs is expected to:

Keep passwords secure.
Lock devices when unattended.
Verify recipients before sending emails.
Avoid sharing confidential information unnecessarily.
Report suspected phishing attempts.
Use approved software and systems.
Dispose of information securely.
Follow company procedures for handling personal data.
Respect client confidentiality at all times.
Report any suspected data breach immediately.

Appendix C – Our Commitment to Information Governance

Blue Script Designs understands that trust is built on responsible handling of information.

We are committed to:

Protecting the personal information entrusted to us.
Maintaining strong information security practices.
Respecting the rights of individuals.
Complying with UK data protection legislation.
Continually improving our governance and security measures.
Delivering digital services with professionalism, integrity and accountability.

Document Classification: Public Website Policy

Approved By: Blue Script Designs Management

Document Owner: Blue Script Designs

Version Control: Version 1.0

Review Frequency: Annually