Data Protection

We have a clear data protection policy describing how we aspire to the highest standards with regards to data protection. We hold an information asset register, and information flow maps, and carry out privacy impact assessments for any new procedures or data processing activity.

Our privacy notice describes how and why we process the personal data we do and how to contact us regarding rights as a data subject. We provide specific privacy notices for job applicants, employees and other data subjects as required.

All our data protection documentation is regularly reviewed and updated to reflect any changes in our data processing.

We are registered as a data processor with the UK data protection regulator, the Information Commissioners Office (ICO) under registration number ZA250463.

We are certified under the Cyber Essentials scheme giving independent verification that we understand the cyber threats to our business and have appropriate cyber security measures in place.

Goody has attained and is governed by the ISO 9001 management system certification. Additional policies and procedures defined in our ISO 9001 management system further demonstrate our commitment to general information security throughout the organisation.