Loading...
GDPR Compliance
Your data protection rights under the UK General Data Protection Regulation (UK GDPR).
Last Updated: January 2025
Our Commitment to Data Protection
FractionalFinder Limited is fully committed to protecting your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This page provides detailed information about your data protection rights, how we comply with GDPR requirements, and how you can exercise your rights.
We Are ICO Registered
FractionalFinder Limited is registered with the Information Commissioner's Office (ICO), the UK's independent authority for data protection and privacy rights.
Data Controller Information
Company Name
FractionalFinder Limited
Registration
England and Wales
ICO Registration
[Your ICO Registration Number]
Data Protection Officer
Registered Address
[Your Registered Address]
Your Data Protection Rights
Under UK GDPR, you have the following rights regarding your personal data:
1. Right to Access (Article 15)
You have the right to request a copy of the personal data we hold about you, along with information about how we process it.
What You Can Request:
- A copy of your personal data
- The purposes of processing
- Categories of data we collect
- Recipients of your data
- Data retention periods
- Your other rights
2. Right to Rectification (Article 16)
You have the right to have inaccurate personal data corrected and incomplete data completed.
How to Update Your Data:
- Update profile information directly in your account settings
- Contact us for data we don't display in your account
- We will respond within one month
3. Right to Erasure / "Right to be Forgotten" (Article 17)
You have the right to request deletion of your personal data in certain circumstances.
When You Can Request Deletion:
- The data is no longer necessary for the purposes it was collected
- You withdraw consent (where processing is based on consent)
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
- Deletion is required for legal compliance
Note: Some data may need to be retained for legal reasons (e.g., financial records for 7 years under UK tax law, or employment records if required by law).
4. Right to Restrict Processing (Article 18)
You can request that we limit how we use your data in certain situations.
When You Can Restrict Processing:
- You contest the accuracy of the data (while we verify it)
- Processing is unlawful but you don't want deletion
- We no longer need the data but you need it for legal claims
- You've objected to processing (while we verify our legitimate grounds)
When processing is restricted, we can store the data but not use it without your consent, except for legal claims or to protect others' rights.
5. Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
What We Provide:
- Your profile data (JSON format)
- Your job applications and submissions
- Your activity history
- Any content you've created
This right applies to data processed by automated means based on consent or contract.
6. Right to Object (Article 21)
You can object to processing of your personal data in certain circumstances.
What You Can Object To:
- Direct Marketing: Absolute right to object (we must stop)
- Legitimate Interests Processing: We must stop unless we can demonstrate compelling legitimate grounds
- Profiling: Object to automated decision-making (we don't currently use this)
7. Right to Withdraw Consent (Article 7)
Where we process data based on your consent, you can withdraw that consent at any time.
Examples:
- Marketing communications (unsubscribe link in emails)
- Optional cookies (cookie settings)
- LinkedIn data import (disconnect in settings)
- AI profile enhancement (disable in settings)
Withdrawing consent does not affect the lawfulness of processing before withdrawal.
8. Right to Lodge a Complaint (Article 77)
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.
Contact the ICO:
Website: ico.org.uk
Helpline: 0303 123 1113
Email: casework@ico.org.uk
Address:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
We encourage you to contact us first so we can try to resolve any concerns directly.
How to Exercise Your Rights
Account Settings
Many rights can be exercised directly through your account settings, including updating profile information, downloading data, and managing preferences.
Go to DashboardEmail Request
For rights that cannot be exercised through your account, send a detailed request to our Data Protection Officer.
Contact DPOWhat to Include in Your Request
- Your full name and email address associated with your account
- Description of the right you wish to exercise
- Specific details about your request
- Proof of identity (if necessary for security)
Response Times
- Standard Response: Within one month of receiving your request
- Complex Requests: May be extended by two additional months (we'll notify you)
- No Charge: Requests are free unless manifestly unfounded, excessive, or repetitive
Our Data Processing Activities
Under GDPR Article 30, we maintain records of our data processing activities:
| Processing Activity | Legal Basis | Data Categories | Retention |
|---|---|---|---|
| Account Management | Contract | Identity, contact, profile | Account lifetime + 30 days |
| Job Matching | Contract | Profile, skills, preferences | Account lifetime |
| Payment Processing | Contract, Legal obligation | Financial, transaction | 7 years (tax law) |
| Marketing | Consent | Contact, preferences | Until consent withdrawn |
| Analytics | Legitimate interests | Usage, device data | 2 years |
| Security | Legitimate interests | Logs, IP addresses | 90 days |
Technical and Organisational Measures
In compliance with GDPR Article 32, we implement appropriate technical and organisational measures to ensure data security:
Technical Measures
- TLS/SSL encryption for data in transit
- AES-256 encryption for data at rest
- Multi-factor authentication (MFA) support
- Regular security testing and penetration testing
- Automated vulnerability scanning
- Secure credential management
- Database backup and disaster recovery
Organisational Measures
- Data Protection Impact Assessments (DPIAs)
- Staff training on data protection
- Access controls and role-based permissions
- Data breach notification procedures
- Third-party vendor due diligence
- Data processing agreements with suppliers
- Regular compliance audits
International Data Transfers
Some of our service providers may process data outside the UK. We ensure adequate safeguards are in place in compliance with GDPR Chapter V:
- Standard Contractual Clauses (SCCs) approved by UK authorities
- Adequacy decisions where applicable
- Vendor compliance with UK GDPR standards
- Regular transfer impact assessments
For more details, see our Privacy Policy.
Data Breach Notification
In compliance with GDPR Articles 33 and 34, we have procedures in place for data breach notification:
Our Commitments
- To the ICO: We will report breaches to the ICO within 72 hours if there's a risk to rights and freedoms
- To You: We will notify affected individuals without undue delay if there's a high risk to your rights
- Transparency: We will provide clear information about the breach, its impact, and remedial actions
If you suspect a security incident or unauthorised access to your account, contact us immediately at security@fractionalfinder.io.
Contact Our Data Protection Officer
For any questions about your data protection rights or our GDPR compliance, please contact our Data Protection Officer:
Email: dpo@fractionalfinder.io
Privacy Team: privacy@fractionalfinder.io
Address:
Data Protection Officer
FractionalFinder Limited
[Your Registered Address]