All policies

Policy & Governance

GDPR Policy

Document
GDPR Policy
Last reviewed
1 January 2026
Review cycle
Reviewed yearly

WE ARE SDM LTD ("we", "us", or "our") is committed to protecting your privacy and ensuring that your personal data is handled in compliance with the General Data Protection Regulation (GDPR). This policy explains how we collect, use, store, and protect your personal data.

01

Data We Collect

We may collect and process the following types of personal data:

  • Personal Information: Name, email address, phone number, and other contact details.
  • Business Information: Company name, job title, and industry.
  • Technical Data: IP addresses, browser type, and device information.
  • Marketing Preferences: Your preferences for receiving communications from us.
02

How We Use Your Data

We use your personal data for the following purposes:

  • To provide and improve our services.
  • To communicate with you regarding enquiries, marketing, and promotions.
  • To comply with legal and regulatory obligations.
  • To analyse website traffic and user behaviour.
03

Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

  • Consent: When you provide consent to receive marketing communications.
  • Contractual Obligation: When processing is necessary to fulfil a contract.
  • Legal Compliance: When required by law or regulation.
  • Legitimate Interest: When processing is necessary for our business operations.
04

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law.

05

Data Sharing

We may share your data with:

  • Service providers and partners who assist in business operations.
  • Regulatory and legal authorities when required by law.
  • Third parties in case of business transfers or mergers.
06

Your Rights Under GDPR

Under GDPR, you have the following rights:

  • Right to Access: Request access to your personal data.
  • Right to Rectification: Request corrections to inaccurate data.
  • Right to Erasure: Request deletion of your data.
  • Right to Restrict Processing: Limit how we process your data.
  • Right to Data Portability: Receive your data in a transferable format.
  • Right to Object: Object to data processing for marketing purposes.
07

Security Measures

We implement security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction.

08

Cookies and Tracking

We use cookies and tracking technologies to enhance your website experience. Please refer to our Cookie Policy for more details.

Contact

If you have any questions or requests regarding this GDPR Policy, please contact us at support@wearesdm.com.

By using our services, you acknowledge and agree to the terms outlined in this GDPR Policy.