We are conscious of our responsibilities as a "Data Controller" under the Data Protection Act 2018 and the UK's implementation of the General Data Protection Regulation (GDPR). We have a responsibility to follow strict 'data protection principles'. to ensure that the personal information we obtain and use will always be held, used, transferred and otherwise processed in accordance with that act and all other applicable data protection laws and regulations.