GDPR Compliance Statement

Last Updated: May 11, 2026

Our Commitment to GDPR

SocialBenefits Advisory is fully committed to compliance with the General Data Protection Regulation (GDPR) and UK data protection laws. We take the protection of your personal data seriously and have implemented robust measures to ensure compliance.

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for the performance of a contract with you
• Legal Obligation: Processing is necessary to comply with legal obligations
• Legitimate Interests: Processing is necessary for our legitimate interests, provided your rights do not override these interests

Your GDPR Rights

Under GDPR, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You have the right to request restriction of processing of your personal data under certain circumstances.

Right to Object

You have the right to object to our processing of your personal data under certain circumstances.

Right to Data Portability

You have the right to request transfer of your personal data to another organization or directly to you.

Right to Withdraw Consent

Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time.

Data Protection Officer

For any GDPR-related inquiries or to exercise your rights, please contact us at:

Email: [email protected]
Address: 123 Benefits House, London, EC1A 1BB, United Kingdom

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

We do not transfer your personal data outside the UK or European Economic Area. If this changes, we will ensure appropriate safeguards are in place.

Data Security Measures

We have implemented appropriate technical and organizational measures including:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication procedures
• Staff training on data protection
• Incident response procedures

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: zesty-learning.com
Phone: 0303 123 1113

Updates to This Statement

We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date.