1. Who we are
NIKA GLOBAL CARE LTD ("we", "us") is a private limited company registered in England and Wales, company number 16039764, with its registered office at Atlas First Floor, 228a High Street, Bromley, London, United Kingdom, BR1 1PQ.
We are the data controller for personal data described in this notice. Our registration with the Information Commissioner's Office is [PLACEHOLDER: ICO registration number].
2. How to contact us
For any question about this notice or about how we handle personal data, contact office@nikaglobal.uk or write to our registered office.
[PLACEHOLDER: state whether a Data Protection Officer has been appointed. If one has, give their name and contact details. If one has not, state that and briefly explain why the appointment criteria in UK GDPR Article 37 do not apply.]
3. What personal data we collect
[PLACEHOLDER: list every category of personal data actually collected. As a minimum this is likely to include: enquiry form submissions (name, work email, organisation, message), email correspondence, and any website analytics data. Do not list categories you do not collect, and do not omit categories you do.]
Special category data. [PLACEHOLDER: state whether any special category data under UK GDPR Article 9 — including health data — is processed through this website or in the course of delivering services, and under which Article 9 condition. This is critical for a healthcare supplier and must be answered precisely.]
4. Why we process it and our lawful basis
[PLACEHOLDER: for each purpose, state the lawful basis under UK GDPR Article 6. For example: responding to enquiries (legitimate interests), performing a contract (contract), meeting a legal obligation (legal obligation). Where legitimate interests is relied upon, record the balancing assessment and summarise its outcome here.]
5. Who we share it with
[PLACEHOLDER: name every category of recipient and every processor. This includes hosting providers, email providers, CRM systems, analytics providers and any subcontractor with access to personal data. A vague reference to "trusted third parties" does not satisfy the transparency requirement.]
6. International transfers
[PLACEHOLDER: state whether personal data is transferred outside the UK. If it is, name the destinations and the transfer mechanism relied upon — adequacy regulations, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.]
7. How long we keep it
[PLACEHOLDER: state a retention period for each category of data, with the reasoning. "As long as necessary" is not a retention period and will not satisfy a regulator or an informed data subject.]
8. How we protect it
[PLACEHOLDER: summarise the technical and organisational measures actually in place — access control, encryption in transit and at rest, audit logging, staff training, and any certifications held. Describe only measures genuinely implemented.]
9. Your rights
Under UK data protection law you have the right to access your personal data, to have inaccurate data corrected, to have data erased in certain circumstances, to restrict or object to processing, and to data portability. Where processing is based on consent, you may withdraw that consent at any time.
To exercise any of these rights, contact us using the details in section 2. We will respond within one month. [PLACEHOLDER: confirm the internal process and owner for handling subject access requests.]
10. Complaints
If you are not satisfied with how we have handled your personal data, you may complain to the Information Commissioner's Office at ico.org.uk, by telephone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would ask that you raise the matter with us first so we have the chance to put it right.
11. Changes to this notice
We may update this notice. The date at the top records when it was last reviewed. [PLACEHOLDER: state how material changes will be communicated to affected individuals.]