Data Protection

1. Data Controller

JLM Retail Group is the data controller responsible for your personal data. We are committed to protecting your privacy and ensuring the security of your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant legislation.

2. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for us to process your personal data
• Contract: When processing is necessary for the performance of a contract
• Legal Obligation: When processing is necessary to comply with a legal obligation
• Legitimate Interests: When processing is necessary for our legitimate interests

3. Your Rights Under Data Protection Law

You have the following rights regarding your personal data:

• Right of Access: You have the right to obtain confirmation as to whether personal data concerning you is being processed
• Right to Rectification: You have the right to have inaccurate personal data corrected
• Right to Erasure: You have the right to request deletion of your personal data
• Right to Restrict Processing: You have the right to request restriction of processing
• Right to Data Portability: You have the right to receive your personal data in a structured format
• Right to Object: You have the right to object to processing of your personal data
• Rights Related to Automated Decision Making: You have rights regarding automated decision-making and profiling

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

6. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

7. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

8. Contact Us

To exercise your data protection rights or if you have any questions about our data protection practices, please contact us at:

Email: support@jlmretailgroup.co.uk
Data Protection Officer: support@jlmretailgroup.co.uk