Data protection

General Data Protection Regulation (GDPR)

On the 25th of May 2018 the new EU General Data Protection Regulation (GDPR) came into effect changing the way businesses gain and use customer data. Superseding the 1995 EU Data Protection Directive, the new regulation will address the growing importance given to customer data.

Learn more about our privacy statement.

Introduction

As a large group of business, with millions of customers, Arora Group and its subsidiaries handle a large volume of personal information. This information can relate to customers, employees, other workers, pensioners, business contacts and suppliers.

Personal information can be defined as information about an individual that is personally identifiable, such as their name, address, email address, telephone number and details of their financial affairs.

Arora Group understands that the protection of personal information is an essential requirement for any business. The way in which we collect, and share, such information is equally important. Our customers, for example, expect that we manage their information according to high standards of privacy and security. Failure to meet their expectations would lead to a serious loss of trust in our business.

This statement outlines the steps we have taken to ensure that the privacy and security of personal information is respected throughout our organisation.

Laws and regulations

Arora Group is defined as both data controller and processor under European data protection legislation known as the General Data Protection Regulation (GDPR) and is consequently required to implement appropriate technical and organisational measures to protect personal information.

The security and protection of customer information is also overseen by regulatory institutions such as including Information Commissioner’s Office. In addition to this, we are subject to the common law duty of confidentiality.

We take our legal and regulatory obligations seriously and have developed robust policies, practices and training to ensure the protection of personal information, including when transferring the information outside the Arora Group and its subsidiaries.

Arora Group Policy and Principles

Our Group Privacy Policy governs how we collect, handle, store, share, use and dispose of information about people. We regard sound privacy practices as a key element of corporate governance and accountability.

Arora Group and its subsidiaries are committed to keeping your information private. By 'your information' we mean any information about you that you or third parties provide to us.

The personal information we hold about you must be:

• Used lawfully, fairly and in a transparent way.
• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
• Relevant to the purposes we have told you about and limited only to those purposes.
• Accurate and kept up to date.
• Kept only as long as necessary for the purposes we have told you about.
• Kept securely.

Arora Group is excited by the opportunity to once again prove to our customers the value we place on delivering high quality services in all aspects of the business.

If you have any questions about privacy at the Arora Group, please contact:
Arora Group Data Protection Team
Mail: World Business Centre 3, Newall Road, London Heathrow Airport, Middlesex, TW6 2TA United Kingdom
Email: gdpr@thearoragroup.com

Learn more about our privacy statement.