The GDPR and the UK ICO state that I, as a sole trader, have to take actions pertaining to the storage of customer data. It is considered to be "data processing" if I use these data to generate invoices. Else why would I have the data?
Therefore I issue the following statement:
Customer data is only collected and stored for the purposes of billing for work carried out under the name of MIllstream Computing. If I have you data it was provided to me for the purposes of billing and has been in my system since that time. Your data is never shared with anyone.
These data are:
- Billing name
- Billing address ,if suppled.
- E mail address for billing
- Telephone number, if supplied
Customer may request any data I hold about them and may request the deletion of their personal data. This request will expedited as soon as practicable as to comply with the law. Clearly anyone making these requests will have to prove their identity absolutely before I take any action.
You have the right to complain to the ICO if you believe your rights are violated in any way by the storing of your personal data.