Technical Authors Limited complies to the requirements of GDPR. Some of the key areas GDPR covers are:

• Personal data about EU-based people:This includes our customers, employees, suppliers and any other individual we collect personal data from. Personal data includes names, contacts, medical information, credit card or bank account details and more.
• How we collect personal data:We can only collect personal data if we have a legal reason to do so. We might need it for a sales contract, for example, or our customer may have asked us to send them some information on our products or services. In all cases, we must make it clear what the personal data will be used for – and only use it for that purpose.
• User contracts and terms and conditions (on websites, for example):These need to be simple, clear and easy to understand – with no complicated legal text.
• The right to know:Individuals can ask us what information is being held about them. This is not a new right, but we must now respond within one month and cannot charge a fee.
• The right to erasure:Customers can ask us to delete all stored personal data about them, unless we need to keep that information for legal reasons, such as tax.
• Data portability:Individuals can request a digital copy of their personal data to use however they like, including transitioning to a new service provider.
• Data breach:We are obliged to report certain types of data breach to the relevant supervisory authority.

The UK government replicated GDPR into UK law prior to Brexit, so as a UK company we have the same obligations.