Privacy Policy

1. Introduction

DLC Tech Solutions Limited is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you interact with our websites, services, and platforms.

This policy applies to:

• https://dlcts.co.uk
• https://xaudit.co.uk

and any associated services provided by DLC Tech Solutions Limited.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and guidance issued by the Information Commissioner's Office (ICO).

2. Who we are

DLC Tech Solutions Limited acts as:

• Data Controller for its business operations, websites, and the xAudit platform
• Data Processor where personal data is processed on behalf of clients during consultancy engagements

3. Personal data we collect

3.1 dlcts.co.uk

We may collect and process the following information:

• Name
• Email address
• Telephone number
• Business details
• Enquiry messages and correspondence

This data is collected when you contact us via our website, email, or other communication channels.

Where you book a consultation using our Calendly booking form, we may also collect the contact and scheduling information you provide there in order to arrange and manage your appointment.

3.2 xaudit.co.uk

Where users register for or use the xAudit platform, we may process:

• Name
• Email address
• Telephone number
• Business details
• Enquiry messages
• User account details
• Login credentials (stored in hashed and encrypted form)
• Audit records
• Compliance documentation uploaded by users
• System metadata and access logs

The xAudit platform is designed to support compliance and audit readiness activities and processes data only for those purposes.

3.3 Special category data

DLC Tech Solutions Limited does not intentionally collect or process special category personal data (such as health data, biometric data, or criminal offence data).

4. How we collect personal data

We collect personal data through:

• Website contact forms
• Email communications
• Account registration on the xAudit platform
• Client onboarding and contractual engagement
• Upload of documentation by authorised users

We do not collect personal data through automated profiling or decision-making.

5. Lawful basis for processing

We process personal data under the following lawful bases:

• Contract – where processing is necessary to deliver services or fulfil contractual obligations
• Legitimate interests – to operate, improve, and secure our services and platforms
• Legal obligation – where we are required to retain or disclose data by law
• Consent – where explicitly provided (for example, enquiry submissions)

6. How we use personal data

We use personal data to:

• Respond to enquiries
• Provide consultancy and advisory services
• Operate and maintain the xAudit platform
• Manage client relationships and contracts
• Provide technical support
• Maintain system security and audit logging
• Meet legal, regulatory, and contractual obligations

Personal data is used only for legitimate business purposes and never sold to third parties.

7. Data storage and security

We take appropriate technical and organisational measures to protect personal data, including:

• Use of Microsoft 365 cloud services
• UK and EU data residency
• Role-based access controls
• Multi-factor authentication where applicable
• Encryption at rest and in transit
• Secure user account management
• Monitoring and logging of system access

Access to personal data is restricted to authorised individuals only.

8. Third-party processors

We may use trusted third-party service providers to support our operations, including:

• Cloud service providers
• Website hosting services
• Domain registrars
• Email and communication services
• Appointment scheduling providers, including Calendly

All third-party processors are required to implement appropriate security measures and process data only under our instructions.

9. International data transfers

We do not routinely transfer personal data outside the United Kingdom or European Economic Area (EEA).

Where international transfers are required in exceptional circumstances, appropriate safeguards will be applied in accordance with UK GDPR requirements.

10. Data retention

We retain personal data only for as long as necessary, based on:

• Contractual requirements
• Legal and regulatory obligations
• Operational necessity

When personal data is no longer required, it is securely deleted or anonymised.

11. Your data protection rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request rectification of inaccurate data
• Request erasure of your data
• Restrict processing
• Object to processing
• Request data portability

To exercise your rights, please contact: support@dlcts.co.uk

We may request proof of identity before responding.

We will respond within one calendar month in accordance with legislation.

12. Cookies

dlcts.co.uk

The website uses contact forms and may use basic analytics. Any cookies used are limited and non-intrusive.

xaudit.co.uk

The platform uses essential cookies only, required for:

• User authentication
• Session management
• Platform security

No non-essential tracking cookies are used without consent.

A separate Cookie Policy may be provided where required.

13. Data breaches

In the event of a personal data breach, we will:

• Assess the risk to individuals
• Notify the ICO where required
• Inform affected individuals where legally necessary
• Record and manage the incident in line with regulatory expectations

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in legislation, services, or business operations.

The most recent version will always be available on our websites.

15. Contact us

If you have any questions about this Privacy Policy or how we handle personal data, please contact:

You also have the right to lodge a complaint with the Information Commissioner's Office at any time.