about us

SPT Compliance care about data protection and the people behind the data.

We are SPT Compliance

SPT Compliance care about data protection and the people behind the data.

Our aim is to add value by empowering organisations across the UK to focus on their core competencies and improving their processes, consequently strengthening customer trust and making privacy compliance their competitive advantage.

We will work as an extension of your team to deliver new improved solutions and services and will take on your problems as if they were our own.

Our experts will ask the right questions to shape the right objective, give proactive, practical, and commercially led advice on how to get there.

Why us?

SPT Compliance helps organisations maintain GDPR compliance by identifying and addressing specific vulnerabilities impacting the legislation.
case

highly
experienced

People

Data Protection
& Privacy

Hand

Trust Us
You're in Good Hands

Your map should; identify what you collect; why you collect it; who you share it with; and what safeguards are in place to protect personal data.

Firstly, list all the information you are collating for everyone who encounters your organisation

We need to ask ourselves ‘why?’, what are our reasons for collecting and processing data – by law this must be identified.

List the data controllers and data processors of the personal data – what decisions we are making with regard to the data and who we are asking to process the information on our behalf.

Ask ourselves what we are doing to protect the information we have been entrusted with – are we doing all we can?

The first principle of data protection includes transparency, you must be clear, open and honest with people from the start about how you will use their personal data. We have an obligation to tell people from the start, what personal data you hold, why you hold it, what you are going to do with it and what their rights are.

The way of communicating this is to publish a privacy notice which should be available to customers and colleagues. All businesses large and small need a privacy notice. It’s important to explain what you’re doing with people’s data and make sure they know about it in advance because being clear helps build trust, avoids confusion, and lets everyone know what to expect.

Whilst a Data Protection Officer may not be legally required, every organisation should ensure that someone within their management has responsibility for data protection issues. Data protection is everyone’s responsibility, so you’ll need to provide mandatory training to everyone who works for you, including temporary staff and volunteers. The training you provide should cover at least the data protection basics, what to do if something goes wrong, and what privacy information you give out to customers.

Create a plan. Implement the plan. Practice the plan.

Whether this relates to data breach responses, how to handle a data subject access request, or how long you will keep information for. Introducing company policies that detail how you will do all the above is a must!

Our policies and procedures clearly define and set the expectations for all employees and provide a source of reference for employees to be able to review and check if they are meeting those expectations.

Policies and procedures will not only assist a company in meeting its obligations with the law, but will, keep management accountable, help defend against employee claims, and lets employees know where to turn for help.

Brands that trust us