The Data Protection Principles: Article 5.1 says that data should be
(a) Processed lawfully, fairly and transparently
(b) Collected only for specific legitimate purposes
(c) Adequate, relevant and limited to what is necessary
(d) Must be accurate and kept up to date
(e) Stored only as long as is necessary
(f) Ensure appropriate security, integrity and confidentiality
Data Subjects (that’s us) under Article 13 should be told what’s happening to our stored information
Information to be provided where personal data are collected from the data subject
(a) the identity and the contact details of the controller and, where applicable, of the controller’s representative;
(b) the contact details of the data protection officer, where applicable;
(c) the purposes of the processing for which the personal data are intended as well as the legal basis for the processing;
(d) where the processing is based on point (f) of Article 6(1), the legitimate interests pursued by the controller or by a third party;
(e) the recipients or categories of recipients of the personal data, if any;
If someone’s not keeping to these come and talk to us on 0207 060 1210