Privacy Notice

Last updated · 2 July 2026

This notice explains how UKGDPR Limited ("we", "us") collects and uses personal data in connection with DPO·BENCH.

01Who we are

UKGDPR Limited is the controller responsible for the personal data described in this notice. For any privacy queries, contact our Data Protection Officer at [email protected].

02Personal data we collect

03Why we use it

We collect personal data from you for one or more of the following purposes:

04Legal bases

We rely on performance of a contract as the legal basis for processing personal data needed to provide DPO·BENCH. We rely on legitimate interests to process technical and usage data, including IP addresses and other log metadata, for log files, performance analysis, and ensuring the security of the platform.

05Sub-processors

We use a small number of trusted third parties to process personal data on our behalf:

Sub-processorPurposeLocation
ConvexApplication database & backend platformUnited Kingdom
KindeAuthentication & identityAustralia
IONOSApplication hostingEuropean Union

Each sub-processor is bound by appropriate contractual and data-protection safeguards.

06International transfers

Where personal data is transferred outside the UK or EEA, we use Standard Contractual Clauses to transfer name and email address data to Kinde in Australia.

07Retention

We retain log information for ninety days and authentication information for the duration of the contract.

08Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, and object to the processing of your personal data, and to data portability. You may also lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.

09Contact

To exercise your rights or ask any question about this notice, contact us at [email protected].