GDPR Compliance

Your data protection rights under the UK General Data Protection Regulation

Last updated: July 2025

Our Commitment to GDPR

Stock Sync Pro is committed to protecting your personal data and respecting your privacy rights under the UK GDPR. We have implemented comprehensive measures to ensure compliance with data protection regulations and provide you with full control over your personal information.

Your Data Protection Rights

Under UK GDPR, you have the following rights:

Right of Access (Article 15)

You have the right to obtain confirmation of whether we process your personal data and access to that data, along with supplementary information.

Right to Rectification (Article 16)

You can request correction of inaccurate personal data and completion of incomplete personal data.

Right to Erasure (Article 17)

You can request deletion of your personal data in certain circumstances, including when it's no longer necessary for the original purpose.

Right to Restrict Processing (Article 18)

You can request restriction of processing in specific circumstances, such as when you contest the accuracy of the data.

Right to Data Portability (Article 20)

You can receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object (Article 21)

You can object to processing based on legitimate interests, direct marketing, or processing for research/statistics.

Legal Basis for Processing

We process your personal data under the following legal bases:

Contract Performance

Processing necessary to provide our inventory management services and fulfil our contractual obligations.

Legitimate Interest

Improving our services, preventing fraud, and ensuring system security.

Consent

Marketing communications and optional features (you can withdraw consent at any time).

Legal Obligation

Compliance with UK tax, accounting, and business regulations.

Data Retention Policy

We retain personal data only as long as necessary:

  • Account Data: Retained while your account is active and for 2 years after closure
  • Business Data: Retained for 6 years to comply with UK business record requirements
  • Marketing Data: Retained until you withdraw consent or opt out
  • Support Records: Retained for 3 years for quality and training purposes

Data is securely deleted or anonymised after retention periods expire.

International Data Transfers

Your data is primarily processed within the UK and EU. Where we use service providers outside the UK/EU, we ensure adequate protection through:

  • Adequacy decisions recognised by the UK
  • Standard Contractual Clauses approved by the UK authorities
  • Certification schemes and codes of conduct
  • Binding corporate rules where applicable

Data Security Measures

We implement appropriate technical and organisational measures:

Technical Measures

  • End-to-end encryption
  • Secure cloud infrastructure
  • Regular security updates
  • Access logging and monitoring
  • Multi-factor authentication

Organisational Measures

  • Staff training and awareness
  • Access control policies
  • Data breach response plan
  • Regular risk assessments
  • Privacy by design approach

Exercising Your Rights

To exercise any of your data protection rights, please contact us:

Data Protection Officer: zubair@parceltec.co.uk

Privacy Team: zubair@parceltec.co.uk

Address: Stock Sync Pro, Scotland, UK

Response Times

  • • We respond to all requests within 30 days
  • • Identity verification may be required for security
  • • Complex requests may take up to 60 days with notification
  • • No charge for most requests (excessive requests may incur fees)