Data Protection Statement

FYER Ltd — Company No. 16920035 Registered in England & Wales

How FYER protects client, organisational and safeguarding‑related data

FYER is committed to protecting all personal, organisational and sensitive information entrusted to us. We operate with strict data protection standards aligned to UK GDPR, the Data Protection Act 2018, and best practice for safeguarding, charity, education, healthcare and public‑sector environments.

This statement explains how FYER handles, stores and protects data during consultancy engagements and through our website.

1. Our Data Protection Principles

FYER follows clear, practical principles to ensure data is handled securely and responsibly:

  • Lawfulness, fairness and transparency We only process data when there is a clear lawful basis and we communicate openly about how it is used.
  • Purpose limitation Data is collected only for specific, legitimate purposes related to consultancy work or communication.
  • Data minimisation We collect the minimum amount of data required to deliver services effectively.
  • Accuracy We take reasonable steps to ensure data is accurate and up to date.
  • Storage limitation Data is retained only for as long as necessary and securely deleted afterwards.
  • Integrity and confidentiality Data is protected using secure‑by‑design principles, encryption, access controls and modern cloud security practices.

2. Types of Data We Handle

During consultancy engagements, FYER may process:

Client‑provided data

  • Organisational information
  • Technical documentation
  • System architecture details
  • Policy and governance documents
  • Staff role information
  • Project‑related materials

Sensitive or safeguarding‑related data

FYER does not request or store personal case data unless explicitly required for a technical assessment. If such data is provided, it is handled with heightened confidentiality and strict access controls.

Website data

See our Privacy Policy for details on website‑related data collection.

3. Lawful Basis for Processing

FYER processes data under the following lawful bases:

  • Contractual necessity To deliver consultancy services you have requested.
  • Legitimate interest To maintain secure communication, protect systems, and improve service quality.
  • Consent For optional analytics or communication preferences.
  • Legal obligation When required to comply with UK law or regulatory requirements.

4. How We Protect Your Data

FYER applies modern, secure‑by‑design controls to protect all data:

  • Encryption in transit and at rest
  • Secure cloud architecture (Azure/AWS)
  • MFA enforcement
  • Role‑based access control
  • Conditional Access policies
  • Hardened devices and secure endpoints
  • Audit logging and monitoring
  • Data minimisation and retention controls
  • Secure deletion processes

We do not store data on unsecured devices or consumer cloud platforms.

5. Sharing & Disclosure

FYER does not share client data with third parties unless:

  • You explicitly request or approve it
  • It is required to deliver a service (e.g., cloud configuration)
  • We are legally required to do so
  • It is necessary to protect against fraud, abuse or security threats

Any third‑party services used are GDPR‑compliant and operate under strict contractual controls.

6. Retention & Deletion

Data is retained only for as long as necessary:

  • Enquiries: up to 12 months
  • Consultancy data: duration of engagement + required legal retention
  • Safeguarding‑related data: shortest possible retention, securely deleted once no longer required
  • Technical documentation: retained only while relevant to active work

You may request deletion of your data unless legal obligations require retention.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access your data
  • Request corrections
  • Request deletion
  • Restrict processing
  • Object to processing
  • Request a copy of your data
  • Withdraw consent

Contact us to exercise any of these rights.

8. Contact Information

For questions about data protection or how FYER handles your information:

Email: info@fyer.co.uk Website: https://fyer.co.uk Location: United Kingdom

9. Updates to This Statement

FYER may update this Data Protection Statement to reflect changes in legislation, technology or service delivery. The latest version will always be available on this page.