GDPR & Data Protection

Last updated: October 2026

Your Best Solution Limited is committed to UK General Data Protection Regulation (UK GDPR) compliance and data protection best practice. This document outlines our approach to handling personal data in line with your rights and our legal obligations.

Our Commitment to Data Protection

We believe that data protection is not just a legal requirement — it's fundamental to trust. When you work with us or use our Bid & Tender Readiness Screening, we treat your personal data with the same care we recommend for your own organisation's compliance programmes.

What is GDPR?

The UK General Data Protection Regulation (UK GDPR) is the UK's data protection law. It applies to any organisation processing personal data of individuals in the UK, including:

• Collecting names, email addresses, phone numbers, or company information.
• Recording quiz responses and assessment results.
• Storing contact details for follow-up communications.
• Tracking website behaviour through analytics.

Your Rights Under UK GDPR

As a data subject, you have the following rights:

1. Right of Access

You can request a copy of all personal data we hold about you. We will provide it within 30 days in a commonly used, machine-readable format (Subject Access Request).

2. Right to Rectification

If your data is inaccurate or incomplete, you can ask us to correct it. For example, if your company name is misspelled in your quiz results.

3. Right to Erasure ("Right to be Forgotten")

You can request deletion of your data under certain circumstances, such as:

• Your data is no longer needed for the purpose we collected it.
• You withdraw your consent.
• You object to processing and we have no legal right to retain it.

Note: We may retain data where required by law (tax records for 6 years, for example).

4. Right to Restrict Processing

You can ask us to limit how we use your data — for instance, while a dispute is being resolved, or if you believe your data is inaccurate.

5. Right to Data Portability

You can request your data in a structured, commonly used format (e.g., CSV) so you can transfer it to another service.

6. Right to Object

You can object to:

• Marketing communications (you can opt out of our newsletter at any time).
• Processing based on legitimate interest.
• Automated decision-making or profiling.

7. Right Not to Be Subject to Automated Decision-Making

You have the right not to be subject to decisions made solely by automated means. Our Bid & Tender Readiness Screening is a diagnostic tool — we do not make binding decisions about your business based solely on your score.

How We Protect Your Data

We implement industry-standard safeguards:

• Encryption: All data transmitted to our systems is encrypted using HTTPS.
• Access controls: Only authorised staff can access personal data, and access is logged.
• Secure storage: Data is stored on secure servers with regular backups.
• Staff training: Our team receives regular data protection training.
• Vendor assessment: Any third parties we work with (e.g., HubSpot) are vetted for GDPR compliance.

Making a Data Subject Request

To exercise any of your rights under UK GDPR, contact us in writing:

We will acknowledge your request within 5 working days and respond fully within 30 days. If your request is complex, we may extend this to 60 days and will inform you.

Data Breach Notification

If we become aware of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify you without undue delay (and typically within 72 hours of discovery).
• Describe the nature of the breach and the data involved.
• Explain the likely consequences and measures we are taking to mitigate harm.
• Provide contact details for further information.

How We Use Your Data in Our Services

Bid & Tender Readiness Screening

When you take our free quiz, we collect and use your data to:

• Calculate your score and category breakdown.
• Send you your results and insights.
• Follow up with information about the £995 Comprehensive Health Assessment.
• Improve our diagnostic tools based on aggregate, anonymised data.

Health Assessment Clients

If you engage us for a Comprehensive Health Assessment or other services, we process your data to:

• Deliver the service and provide support.
• Coordinate with specialist partners in our Cure Alliance.
• Maintain records for quality assurance and compliance (6-year retention for tax and employment law).
• Follow up on recommendations and monitor progress.

Complaints

If you believe we have not complied with UK GDPR or data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

You can also contact us first to resolve the issue informally.

Contact Us

For any questions about GDPR, data protection, or to exercise your rights:

• Email: rob@yourbestsolution.co.uk
• Phone: +44 (0)7445 225 668
• Address: Westcliff-on-Sea, Essex, UK