Back to The Water Woman

Data Protection Policy – The Water Woman

Effective Date: 23 September 2025 Review Date: Annually or as required by legislative changes

1. Purpose

This policy outlines how The Water Woman collects, uses, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Scope

This policy applies to all personal data processed by The Water Woman, including data from clients, suppliers, partners, and employees.

3. Principles

We adhere to the following data protection principles:

  • Lawfulness, fairness, and transparency
  • Purpose limitation
  • Data minimisation
  • Accuracy
  • Storage limitation
  • Integrity and confidentiality
  • Accountability

4. Data Collection

We collect personal data only when necessary for:

  • Delivering water utility management services
  • Communicating with clients and stakeholders
  • Fulfilling contractual and legal obligations
  • Improving service quality and efficiency

5. Legal Basis for Processing

We process personal data under the following lawful bases:

  • Consent
  • Contractual necessity
  • Legal obligation
  • Legitimate interests

6. Data Sharing

We do not sell or share personal data with third parties unless:

  • Required by law
  • Necessary for service delivery (e.g., subcontractors or auditors)
  • Explicit consent has been obtained

7. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

  • Secure cloud storage
  • Access controls
  • Regular data audits
  • Staff awareness and training
  • Certification under the Cyber Essentials scheme, demonstrating our commitment to robust cybersecurity practices

8. Data Retention

Personal data is retained only for as long as necessary to fulfil its purpose or comply with legal obligations. Data no longer required is securely deleted.

9. Data Subject Rights

Individuals have the right to:

  • Access their data
  • Rectify inaccuracies
  • Request erasure
  • Restrict processing
  • Object to processing
  • Data portability

Requests can be made by contacting: robyn@thewaterwoman.co.uk