dcgroupltd

Facebook Linkedin Instagram Youtube
logo
Menu

Privacy Policy

  1. Introduction

Darwish Consultancy Group Ltd T/A DC Group is committed to protecting personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy outlines the measures we take to safeguard the personal data of our employees, customers, and other stakeholders.

  1. Scope

This policy applies to all personal data processed by Darwish Consultancy Group Ltd T/A DC Group , including data belonging to employees, customers, contractors, and partners. It also applies to all employees, contractors, and third parties who process data on behalf of the company.

  1. Key Definitions
  • Personal Data: Any information relating to an identified or identifiable individual.
  • Data Subject: The individual whose personal data is being processed.
  • Data Controller: The entity that determines the purposes and means of processing personal data.
  • Data Processor: The entity that processes personal data on behalf of the Data Controller.
  • Processing: Any operation performed on personal data, including collection, storage, modification, and destruction.
  1. Data Protection Principles

Darwish Consultancy Group Ltd T/A DC Group adheres to the following principles in line with UK GDPR:

  • Lawfulness, Fairness, and Transparency
  • Purpose Limitation
  • Data Minimisation
  • Accuracy
  • Storage Limitation
  • Integrity and Confidentiality
  • Accountability
  1. Lawful Basis for Processing

Personal data is processed on one or more of the following lawful bases:

  • Consent
  • Contract
  • Legal Obligation
  • Legitimate Interests
  1. Rights of Data Subjects

Data subjects have the following rights:

  • Right to be Informed
  • Right of Access
  • Right to Rectification
  • Right to Erasure
  • Right to Restrict Processing
  • Right to Data Portability
  • Right to Object
  • Rights related to Automated Decision-Making
  1. Data Collection and Use

Types of Data Collected

Personal data may include names, contact details, identification data, employment details, financial information, and other relevant information.

Purpose of Collection

  • Delivering services
  • Managing contracts and relationships
  • Compliance and regulatory requirements
  • Fraud prevention and identity verification

Source of Personal Data

We may collect personal data about you from:

  • You directly
  • Employers/clients when you apply for a role or are considered for an opportunity
  • Referees (where relevant and permitted)
  • Publicly available sources (e.g. professional networking sites, business websites, public records)
  • Credit reference agencies (CRAs) for credit, identity, or affordability checks
  • Third-party service providers supporting recruitment, screening, and compliance

Consent

Explicit consent will be obtained where required.

  1. Provision of Personal Data

Is the provision statutory or contractual?

The provision of personal data is primarily contractual and, in some cases, required to meet legal and regulatory obligations.

Personal data is required to:

  • Enter into and perform contracts
  • Process orders and deliver services
  • Verify identity and prevent fraud
  • Comply with legal, regulatory, accounting, and tax obligations

Consequences of Not Providing Data

If you choose not to provide requested personal data:

  • We may be unable to enter into a contract
  • We may be unable to deliver services
  • We may be unable to carry out verification or compliance checks
  • Services may be delayed, restricted, or declined

Providing personal data for optional purposes (e.g. marketing) is not mandatory, and consent can be withdrawn at any time.

  1. Data Retention

Personal data will only be retained for as long as necessary or required by law. Data is regularly reviewed and securely deleted or anonymised when no longer required.

  1. Data Security

We implement appropriate technical and organisational measures, including:

  • Encryption
  • Access controls
  • Regular security audits
  1. Data Breach Notification

In the event of a breach, we will:

  • Notify the ICO within 72 hours (where required)
  • Inform affected individuals where there is high risk
  1. Third-Party Data Sharing

We may share data with trusted third parties under strict data protection agreements. International transfers are safeguarded using approved mechanisms such as Standard Contractual Clauses.

  1. Data Protection Officer (DPO)

The designated Data Protection Officer (DPO) is:

Name: Shamrez Darwish
Email: sham@dcgroupltd.co.uk

The DPO is responsible for:

  • Monitoring compliance
  • Advising on DPIAs
  • Acting as contact point for data subjects and the ICO
  1. Data Subject Access Requests (DSARs)

Requests can be made at any time. We will respond within one month.

  1. Right to Lodge a Complaint

You have the right to complain to the Information Commissioner’s Office (ICO) or another relevant supervisory authority if you are dissatisfied with how we handle your personal data.

  1. Employee Responsibilities

All employees must comply with this policy, complete training, and report breaches.

  1. Review and Updates

This policy is reviewed annually or when required by changes in legislation or business operations.

  1. Compliance and Enforcement

Non-compliance may result in disciplinary action or legal consequences.

  1. Credit Reference and Affordability Checks

To help us assess applications, prevent fraud, and meet our legal and regulatory obligations, we may obtain information about you from credit reference agencies (CRAs).
We obtain this information via Creditsafe, which uses its data partner TransUnion to supply consumer credit and identity data.

  • Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority
    FCA Firm Reference Number: 742313
  • TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority
    FCA Firm Reference Number: 737740

The information we receive may include data relating to your identity, credit commitments, payment history, and public record information. This data is used solely for legitimate business purposes, including creditworthiness assessment, identity verification, and fraud prevention, in accordance with applicable data protection laws.

Further information about how Creditsafe and TransUnion process your personal data can be found in their respective privacy notices:

Scroll to Top