Effective date: 26 September 2026
Last modified: 9 October 2026
Version: 1.1
Approver: EVCV Limited
Review date: 26 March 2027
Applies to: personal data for which EVCV Limited is controller or processor
Controller details: EVCV Limited, trading as Premium Hosting, company number 13570383, registered office 28 Oak Tree Lane, Cookhill, Alcester, Warwickshire, B49 5LH, United Kingdom. Contact: sales@premium-hosting.co.uk.
VAT registration number: GB389265053. ICO registration number: ZB232228.
Introduction
This notice supplements our Privacy Policy by describing our UK GDPR accountability framework. It does not repeat the detailed processing information provided in that policy.
Section 1 — Data-protection principles
1.0.1 We aim to process personal data lawfully, fairly and transparently; for specified purposes; limited to what is necessary; accurately; for no longer than needed; and with appropriate security and accountability.
Section 2 — Roles and records
2.0.1 We identify whether EVCV Limited acts as controller, joint controller, processor or sub-processor for each material activity and document relevant purposes, categories, recipients, transfers, retention and security controls.
2.0.2 Business-customer processing is governed by written data-processing terms. An approved data-processing agreement is available on request where required.
Section 3 — Lawful basis and risk assessment
3.0.1 New or materially changed processing must identify a lawful basis before activation. Consent is used only where it can be freely given, specific, informed and withdrawn.
3.0.2 We carry out a data-protection impact assessment where processing is likely to create a high risk to individuals and consult the ICO where required.
Section 4 — Privacy by design and suppliers
4.0.1 Projects should minimise data, restrict access, use appropriate defaults and define retention and deletion before launch.
4.0.2 Processors are assessed proportionately and bound by suitable data-protection terms. We maintain internal records of relevant purposes, processing locations and transfer safeguards.
Section 5 — International transfers
5.0.1 Transfers outside the UK use an applicable adequacy regulation or contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum, plus supplementary measures where needed.
Section 6 — Rights, incidents and complaints
6.0.1 Rights requests follow our Data Rights Request Procedure. Suspected personal-data breaches are assessed, contained, documented and notified where law requires.
6.0.2 You may complain to us through the privacy complaint route and may complain to the ICO at ico.org.uk.
Section 7 — Governance and changes
7.0.1 Privacy enquiries and escalation are handled through our monitored contact at sales@premium-hosting.co.uk. EVCV Limited will appoint a statutory Data Protection Officer if the law requires one.
7.0.2 We review this notice when our processing, suppliers or legal obligations change.