Compliance FAQ
Welcome to VelvetReply's Compliance FAQ! Here, we will answer your most common questions about data compliance and how we manage your data in adherence to UK GDPR, EU GDPR, and DSAR.
How does VelvetReply comply with UK GDPR and EU GDPR?
VelvetReply takes data privacy and compliance seriously. We have robust data management policies in place that comply with both UK GDPR and EU GDPR. We enforce strict data access controls, ensuring that only authorized personnel have access to your data. We also provide comprehensive data processing agreements to our customers.
Pro Tip: Always ensure that you understand how your data will be used before signing any data processing agreement.
How long does VelvetReply retain my data?
In line with DSAR, VelvetReply retains your data for 30 days. However, this can be extended up to 2 months if necessary, depending on the complexity and number of requests. After this period, your data will be permanently deleted from our systems.
Common Mistake: Many businesses assume that data can be retained indefinitely. Always check the data retention policy of any AI platform you use to ensure compliance with DSAR.
How can I access my data?
You can access your data at any time via your VelvetReply dashboard. If you require further assistance, you can refer to our Getting Started guide.
What happens if there is a data breach?
In the rare event of a data breach, VelvetReply will immediately notify you. We will provide you with details of the breach and the steps we are taking to mitigate its impact. We follow all necessary protocols to report data breaches to relevant authorities within 72 hours, as required by the GDPR.
What are my rights under GDPR?
Under GDPR, you have several rights regarding your personal data:
- • Right to Access: You can request a copy of your personal data
- • Right to Rectification: You can request correction of inaccurate data
- • Right to Erasure: You can request deletion of your data
- • Right to Portability: You can request your data in a portable format
- • Right to Object: You can object to processing of your data
How do you ensure data security?
We implement multiple layers of security to protect your data:
- • Encryption: All data is encrypted in transit and at rest
- • Access Controls: Strict role-based access controls
- • Regular Audits: Regular security assessments and penetration testing
- • Staff Training: Regular training on data protection and security
- • Incident Response: Comprehensive incident response procedures