Legal
Data protection and your rights
A practical summary of your rights under UK data protection law, how to use them and how we handle information across our UK-managed delivery model.
Your rights
- Access — ask for a copy of the personal information we hold about you.
- Correction — ask us to correct information that is inaccurate or incomplete.
- Erasure — ask us to delete information where there is no good reason for us to keep it.
- Restriction — ask us to limit how we use information while a concern is checked.
- Objection — object to processing based on legitimate interests.
- Portability — ask for information you provided in a structured, commonly used format where the right applies.
These rights are not absolute. Some records must be kept for legal or contractual reasons, and we will explain if that applies.
How to make a request
Email enquiry@nexgenehub.co.uk with enough detail for us to understand what you are asking for. We may ask for proof of identity to protect your information. We aim to respond within one month. If a request is complex, we will explain why more time is needed.
There is normally no charge. We may charge a reasonable fee or refuse a request if it is clearly unfounded, repetitive or excessive.
Controller and processor roles
For our own enquiries, website and client relationships, NexGen eHub Limited acts as the data controller. When we handle personal data on a client’s instructions as part of a service, the client is the controller and we act as processor under the applicable agreement.
International delivery
Client management is based in the UK. Work may be delivered by our own trained teams in India, and may include external specialists where appropriate for the service type and requirements. Access is limited to the information required for the task, and the same confidentiality and quality standards apply. Where information is accessed outside the UK, we use appropriate safeguards.
Security and retention
We use access controls, confidentiality commitments and documented working practices. Information is kept only for as long as needed for the enquiry, the engagement and any legal record-keeping requirement, then deleted or anonymised.
Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Contact
Data protection enquiries: enquiry@nexgenehub.co.uk.
Need a data processing agreement?
For engagements that involve client personal data, we can put appropriate processing terms in place before work begins.