Team Sheets – Privacy Policy (Updated 17 June 2025)
Introduction
This Data Protection Policy outlines how Team Sheets manages the personal data we hold in accordance with the United Kingdom General Data Protection Regulation (UK GDPR). This policy applies to all data that the company holds relating to identifiable individuals, in particular in relation to customer email data and other personal customer data.
Data Protection Principles
In accordance with UK GDPR, Team Sheets will ensure that personal data will:
i. be processed lawfully, fairly and transparently;
ii. be collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes;
iii. be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
iv. be accurate and, where necessary, kept up to date;
v. be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
vi. be processed in a manner that ensures appropriate security of the personal data.
Lawful Basis for Processing
We only collect and use personal data when we have a lawful basis for doing so. Lawful bases include consent, contract, legal obligation, vital interests, public task and legitimate interests.
Consent
In situations where we are not relying on another lawful basis, we will obtain explicit consent before collecting and using personal data. Data subjects have the right to withdraw their consent at any time.
Data Minimisation
We will only collect minimal data required for the intended purpose. This applies specifically to customer email data and other related personal customer data.
Accuracy
We will ensure the accuracy of any personal data held. Where necessary, we will take steps to rectify or delete any inaccurate data.
Data Storage and Security
Team Sheets employs high standard security measures to ensure that personal data is protected against unauthorised access, alteration, disclosure, or destruction. We also have protocols in place to manage any suspected data breach.
Data Retention and Disposal
Personal data will not be kept longer than necessary for its given purpose. Once data is no longer required, it will be securely deleted in accordance with specific data disposal protocols.
Data Subject Rights
Under the UK GDPR, individuals have the right to access, rectify, erase, limit processing of, or port their personal data. Any requests from data subjects to exercise their rights will be handled promptly within one month of receipt.
Data Protection Officer
We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection strategy and its implementation to ensure compliance with GDPR requirements.
Changes to this Policy
Team Sheets reserves the right to modify this Data Protection Policy at any time. Any changes we may make will be posted on this page, and where appropriate, notified to you by email.
This policy is effective and updated from and including the date set out at the top of this policy.