Data Protection Policy

1. Introduction

Antony Bailey DevOps Consulting ("we", "us", "our") is committed to protecting and respecting your privacy. This Data Protection Policy explains how we collect, use, store, and protect personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

2. Data Controller Information

3. Types of Data We Collect

3.1 Personal Data

• Contact Information: Name, email address, phone number, job title, company name
• Communication Data: Records of correspondence, meeting notes, project discussions
• Technical Data: IP address, browser type, device information, website usage analytics
• Professional Data: CV/resume information, professional experience, technical skills

3.2 Business Data

• Project Information: Technical requirements, system specifications, infrastructure details
• Contractual Data: Service agreements, statements of work, project timelines
• Financial Data: Invoicing information, payment records, expense claims

4. How We Collect Data

• Direct Provision: Information you provide through contact forms, emails, or meetings
• Website Analytics: Data collected through Google Analytics and similar tools
• Professional Networks: Information from LinkedIn, GitHub, and other professional platforms
• Third Parties: Data provided by clients, partners, or professional contacts

5. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Where you have given explicit consent for specific processing activities
• Contract: Processing necessary for contract performance or pre-contractual measures
• Legal Obligation: Compliance with legal and regulatory requirements
• Legitimate Interest: Business operations, marketing, and service improvement

6. How We Use Your Data

6.1 Primary Purposes

• Providing DevOps consulting and technical services
• Project management and delivery
• Client communication and support
• Contract management and billing

6.2 Secondary Purposes

• Business development and marketing
• Service improvement and analytics
• Compliance with legal obligations
• Professional networking and referrals

7. Data Sharing and Disclosure

We may share personal data with:

• Subcontractors: Trusted partners providing technical services under strict data protection agreements
• Cloud Providers: Microsoft Azure, AWS, Google Cloud for secure data storage and processing
• Professional Services: Accountants, legal advisors, and business consultants under confidentiality agreements
• Legal Authorities: When required by law or to protect our legal rights

8. International Data Transfers

Personal data may be transferred to countries outside the UK/EEA when:

• Using cloud services with global infrastructure
• Working with international clients or partners
• Accessing professional tools and platforms

All transfers are protected by appropriate safeguards including adequacy decisions, Standard Contractual Clauses, or certification schemes.

9. Data Security

9.1 Technical Measures

• Encryption of data in transit and at rest
• Multi-factor authentication on all systems
• Regular security updates and patches
• Secure backup and disaster recovery procedures

9.2 Organisational Measures

• Data protection training and awareness
• Access controls and privilege management
• Incident response and breach notification procedures
• Regular security audits and assessments

10. Data Retention

We retain personal data for the following periods:

• Client Data: Duration of contract plus 7 years for legal and tax purposes
• Marketing Data: Until consent is withdrawn or 3 years of inactivity
• Website Analytics: 26 months (Google Analytics default)
• Communication Records: 5 years for business relationship management

11. Your Rights

Under GDPR and UK data protection law, you have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restrict Processing: Limit how we use your data
• Data Portability: Receive your data in a machine-readable format
• Object: Opt out of certain processing activities
• Withdraw Consent: Remove consent for specific processing

12. Exercising Your Rights

To exercise any of your rights, please:

• Email us at: [email protected]
• Use our contact form
• Include your full name and contact details
• Specify which right you wish to exercise

We will respond to your request within one month, or inform you if we need additional time.

13. Complaints

If you believe we have not handled your personal data properly, you can:

• Contact us directly to resolve the issue
• Lodge a complaint with the Information Commissioner's Office (ICO)
• Seek legal remedy through the courts

14. Changes to This Policy

We may update this Data Protection Policy to reflect changes in:

• Legal requirements and regulations
• Our business practices and procedures
• Technology and security measures
• Industry best practices

Material changes will be communicated through our website and directly to affected individuals where required by law.

15. Contact Information

For any questions about this Data Protection Policy or our data practices, please contact: