Data Protection Policy
Our internal data protection governance commitments
Last updated:
27 August 2026
Introduction
This page sets out how Hybytes Ltd handles personal data as an organisation, and the commitments we hold ourselves to under data protection law.
1. Our legal framework
Hybytes Ltd processes personal data in line with UK GDPR, the Data Protection Act 2018, and, where relevant, EU GDPR and other local laws.
2. Our commitments
We commit to:
- Processing personal data lawfully, fairly, and transparently
- Collecting it only for specified purposes, and keeping no more than we need for no longer than we need
- Keeping it accurate and secure
- Honouring data subject rights promptly
- Building privacy by design and by default into our services and processes
- Carrying out impact assessments where processing is likely to be high risk
- Using processors only under written contracts
- Transferring data internationally only with appropriate safeguards in place
3. Responsibility and contact
Responsibility for this policy sits with the directors. For day-to-day queries, please use our contact form.
4. Related policies
Our customer-facing Privacy Policy, Cookie Policy, and Data Processing Agreement explain how this applies to specific engagements.
5. Contract status
This statement does not form part of any contract.