Data Protection & GDPR Policy

At Jroxa Technologies Ltd, we are committed to maintaining the highest standards of privacy and data protection. As a UK-based Cyber Security and Managed Service Provider (MSP), we understand the importance of safeguarding client, employee, and partner data. We handle all information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.Jroxa Technologies Ltd has implemented comprehensive technical and organisational measures to prevent unauthorised access, misuse, loss, or disclosure of information. We continuously monitor and update our systems to align with current best practices in information security and compliance.

Our Data Protection & GDPR Policy ensures that all personal and business data handled by Jroxa is managed securely, fairly, and transparently. The policy outlines:

• The importance of data protection in maintaining client and employee trust  
• The principles of lawful data processing under the UK GDPR  
• How personal and sensitive data is collected, processed, and stored  
• The procedure for handling data access or deletion requests 
• Measures for secure data storage, encryption, and transmission 
• The responsibilities of all employees in maintaining compliance  
• Training and awareness requirements to ensure ongoing understanding of data protection obligations  
• The consequences of non-compliance or data breaches  

All Jroxa employees are trained to follow strict internal policies regarding data confidentiality, information handling, and system security. Every member of staff acknowledges and agrees to adhere to our Data Protection & GDPR Policy as part of their onboarding and regular refresher training.

1. Lawfulness, Fairness and Transparency 
2. Purpose Limitation 
3. Data Minimisation 
4. Accuracy 
5. Storage Limitation 
6. Integrity and Confidentiality (Security) 
7. Accountability 

• All data is stored within encrypted cloud environments with controlled access.  
• All devices used within Jroxa are protected by firewalls, antivirus, and multi-factor authentication.  
• Regular data backups and monitoring ensure information availability and integrity.  
• Confidentiality disclaimers are included in email communications to reduce the risk of accidental data sharing.  
• Client documentation and internal records are stored in secure systems or locked storage, accessible only by authorised personnel.  
• In the unlikely event of a data incident, a structured breach response procedure is followed in line with UK GDPR requirements.  

Jroxa Technologies Ltd is dedicated to upholding the privacy and security of all client and employee data. We continually review our data protection practices to ensure compliance, transparency, and reliability across all our services.For more information about our approach to data protection or to request access to personal data we may hold, please contact our compliance team via info@jroxa.com.