GDPR Compliance - Allen Ralford Barkley

Our Commitment to GDPR

Allen Ralford Barkley is committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR). This page explains your rights and how we comply with GDPR requirements.

Your Rights Under GDPR

Under GDPR, you have several important rights regarding your personal data:

Right of Access

You have the right to request copies of your personal data that we hold.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data.

Right to Data Portability

You have the right to request transfer of your data to another organization.

Right to Object

You have the right to object to our processing of your personal data.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: When you have given clear consent for us to process your data
Contract: When processing is necessary for a contract we have with you
Legal Obligation: When we must process your data to comply with the law
Legitimate Interests: When processing is necessary for our legitimate business interests

Data Protection Measures

We implement appropriate technical and organizational measures to ensure data security:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication systems
Staff training on data protection principles
Incident response procedures

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

Client data: Retained for the duration of our business relationship plus 7 years for legal compliance
Marketing data: Retained until consent is withdrawn or for 3 years of inactivity
Website analytics: Retained for 26 months
Contact inquiries: Retained for 2 years unless a business relationship develops

International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

Adequacy decisions by the European Commission
Standard Contractual Clauses (SCCs)
Binding Corporate Rules (BCRs)
Certification schemes

Exercise Your Rights

To exercise any of your GDPR rights, please use the form below or contact us directly:

GDPR Rights Request Form

We will respond to your request within 30 days. For verification purposes, we may need to request additional information to confirm your identity.

Data Protection Officer

For questions about data protection or to exercise your rights, you can contact our Data Protection Officer:

Email: dpo@allenralfordbarkey.com

Address: Allen Ralford Barkley, Data Protection Officer

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. You can contact your local data protection authority or the authority in the country where the alleged violation occurred.

Updates to This Information

We may update this GDPR compliance information from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes.