Data Protection

1. Data controller

The data controller for Jigsaw Virtual Assistance is the business owner, operating from the United Kingdom. As data controller, we are responsible for deciding how and why your personal data is collected and used.

Website: jigsawvirtualassistance.com

2. What personal data we hold

Depending on the nature of our relationship, we may collect and hold the following personal data:

• Your name, email address, and phone number
• Your business name, job title, and professional background
• Details of the services you have enquired about or engaged us to provide
• Communications exchanged via email, phone, or our website contact form
• Business-related information shared with us as part of providing virtual assistance services

We only collect information that is necessary to provide our services or to respond to your enquiry.

3. Lawful basis for processing

We process your personal data on the following lawful bases:

• Contract — to deliver virtual assistance services as agreed with you
• Legitimate interests — to manage our business, respond to enquiries, and maintain client relationships
• Legal obligation — to meet any applicable record-keeping requirements
• Consent — where you have agreed to us holding or using your information in a specific way

4. Client confidentiality

As a virtual assistance business, we understand that the information shared with us during the course of our work may be sensitive or commercially confidential. We treat all client information with the utmost discretion and will never share it with third parties without your explicit consent, unless required to do so by law.

5. How we store your data

Your personal data is stored securely using appropriate technical and organisational measures. Access to client data is strictly limited to authorised members of the Jigsaw Virtual Assistance team directly involved in delivering your services.

6. How long we keep your data

We retain your personal data only for as long as necessary. Active client data is held for the duration of our working relationship and for up to 6 years thereafter in line with standard UK business record-keeping requirements. Enquiry data where no services were engaged is held for up to 12 months.

7. Sharing your data

We do not sell your personal data. We will not share your information with third parties except where strictly necessary to deliver agreed services, or where required by law. Any third parties involved are required to handle your data in accordance with UK GDPR.

8. Your rights

Under UK GDPR, you have the following rights:

• The right to access the personal data we hold about you
• The right to have inaccurate data corrected
• The right to have your data deleted (where applicable)
• The right to restrict or object to how we process your data
• The right to data portability
• The right to withdraw consent at any time

To exercise any of these rights, please contact us and we will respond within one month.

9. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

ICO website: www.ico.org.uk  |  ICO helpline: 0303 123 1113