Data Protection

GDPR Compliance Statement

EthicPath is committed to compliance with the UK GDPR and EU GDPR where applicable.

Our GDPR Approach

Lawful, Fair & Transparent

We process data lawfully, fairly, and with full transparency about how your information is used.

Purpose Limitation

Data is collected for specified, explicit purposes and not processed in ways incompatible with those purposes.

Data Minimisation

We collect only the data necessary for the specific purpose, ensuring minimal data exposure.

Accountability

We maintain comprehensive records and demonstrate compliance across all operations.

Data Processing Role

Depending on engagement:

  • EthicPath may act as a data processor
  • Clients typically act as the data controller

Roles are clarified contractually before service delivery.

Security Measures

GDPR-aligned workflows
Confidentiality agreements
Role-based access
Secure client-approved systems

International Data Transfers

Where data is processed internationally, appropriate safeguards are applied in line with GDPR requirements.

Contact

For GDPR or data protection enquiries:

Email: [email protected]

Questions About Data Protection?

Our team is here to answer any questions about how we handle and protect your data.

Contact Data Protection Team