GDPR Compliance

1. Our role

We act as a data controller for personal data of website visitors and clients, and as a data processor when handling personal data on behalf of our customers. As a UK-based controller we comply with the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

ICO registration: HM World Limited is registered with the UK Information Commissioner's Office. Our registration reference will be published here once issued and can be verified at ico.org.uk/ESDWebPages/Search. You have the right to lodge a complaint with the ICO at any time (ico.org.uk/make-a-complaint · 0303 123 1113).

2. Data subject rights

• Right to be informed — through this notice and our Privacy Policy.
• Right of access — request a copy of your data.
• Right to rectification — correct inaccurate data.
• Right to erasure — “right to be forgotten”.
• Right to restrict processing.
• Right to data portability.
• Right to object to processing based on legitimate interests.
• Rights related to automated decision-making and profiling.

3. Technical & organisational measures

• Encryption in transit (TLS 1.2+) and at rest where appropriate.
• Role-based access control and least-privilege defaults.
• Quarterly access reviews and security training.
• Documented incident response and breach notification process.

4. International transfers

Personal data is stored within the UK and EEA. Where transfers occur outside this area, we rely on UK adequacy regulations or Standard Contractual Clauses (SCCs).

5. Sub-processors

We maintain a current list of sub-processors and notify clients of material changes. Contact us for the latest list.

6. Breach notification

We will notify the ICO within 72 hours of becoming aware of a personal data breach likely to result in risk to data subjects, and inform affected individuals where required.

7. Data Protection contact

Data protection enquiries: Hmworld6@hotmail.com · +44 7910 410879.