Data Protection & Security

Comprehensive information about how we protect your personal data

UK GDPR Compliant • ICO Registered • Data Protection Act 2018

Our Commitment to Data Protection

At Scot Pooper Scoopers, we take the security and privacy of your personal data seriously. We implement robust technical and organizational measures to ensure your information is protected against unauthorized access, loss, or misuse.

This page provides detailed information about our data protection practices, security measures, and your rights under UK GDPR and the Data Protection Act 2018.

GDPR Data Protection Principles

We process your personal data in accordance with the following principles:

Lawfulness, Fairness & Transparency

We process data lawfully, fairly, and in a transparent manner.

Purpose Limitation

Data collected for specified, explicit, and legitimate purposes only.

Data Minimization

We only collect data that is adequate, relevant, and necessary.

Accuracy

Personal data is kept accurate and up to date.

Storage Limitation

Data retained only as long as necessary for the stated purposes.

Integrity & Confidentiality

Data processed securely with appropriate technical measures.

Technical Security Measures

🔐 Encryption

All data is encrypted both in transit and at rest:

  • • SSL/TLS encryption for all data transmission
  • • AES-256 encryption for data at rest
  • • Encrypted database backups
  • • Secure API communications

🛡️ Access Controls

Strict access control measures:

  • • Multi-factor authentication (MFA) for all admin accounts
  • • Role-based access control (RBAC)
  • • Regular access audits and reviews
  • • Principle of least privilege enforced

🔍 Monitoring & Detection

24/7 security monitoring:

  • • Real-time threat detection systems
  • • Intrusion detection and prevention (IDS/IPS)
  • • Automated security alerts
  • • Regular security log reviews

🔄 Backup & Recovery

Comprehensive backup strategy:

  • • Daily encrypted backups
  • • Geographically distributed backup storage
  • • Regular backup testing and validation
  • • Disaster recovery plan in place
Organizational Security Measures

Staff Training

All employees receive regular data protection and security training. Annual GDPR compliance refresher courses are mandatory.

Confidentiality Agreements

Every staff member and contractor signs strict confidentiality agreements before accessing any personal data.

Data Protection Officer

We have appointed a dedicated Data Protection Officer (DPO) responsible for overseeing data protection strategy and compliance.

Regular Audits

We conduct regular internal and external security audits to identify and address potential vulnerabilities.

Incident Response Plan

Comprehensive incident response procedures ensure quick action in case of any security breach or data incident.

Vendor Management

All third-party vendors undergo thorough security assessments and must meet our data protection standards.

Data Breach Response

In the unlikely event of a personal data breach, we follow strict procedures:

1. Immediate Containment

We act immediately to contain the breach and prevent further data exposure.

2. Assessment & Documentation

We assess the scope, impact, and risks of the breach and document all findings.

3. ICO Notification (72 hours)

If required, we notify the Information Commissioner's Office within 72 hours of becoming aware of the breach.

4. Individual Notification

If the breach poses a high risk to your rights and freedoms, we will notify you without undue delay.

5. Remediation & Prevention

We implement measures to prevent similar breaches in the future and update our security protocols.

Compliance & Certifications

GDPR Compliant

Fully compliant with UK GDPR and Data Protection Act 2018

PECR Compliant

Privacy and Electronic Communications Regulations — SMS and email consent managed

ICO Registered

Registered with the UK Information Commissioner's Office

Data Protection Inquiries

For questions about our data protection practices or to exercise your rights:

2 McNeill Place
Blantyre, Glasgow G72 9FE
Scotland

© 2026 Scot Pooper Scoopers Limited. All rights reserved.

Registered with the Information Commissioner's Office (ICO) • UK GDPR & Data Protection Act 2018