GDPR Mentor is a DBR Data Ltd product, and as such this privacy policy relates to DBR Data Ltd. Full registration details can be seen at the end of this policy.

How we use your information

DBR Data only collect what is absolutely necessary to offer you the services that you are engaged with us in.

Services we offer

DBR Data offers Information Management consultancy, and develops software applications that relate to Information Management challenges, such as GDPR.

Our promise to you

We will take all reasonable measures to ensure the information you share with us is protected with appropriate technical and organisational measures.

We will never share your information without your explicit consent and only keep your information when we have a Legal Basis to do so or you have given your consent.

Your rights as an individual

Under the General Data Protection Act you have certain rights under law, these are:

  • The Right To Be Informed
    • How if your data being used, what is being collected etc. (this Privacy Policy)
  • The Right To Erasure
    • The right to request that your information is deleted from our systems
  • The Right To Access
    • The right to request a copy of information that we hold against you
  • The Right To Rectification
    • If the data we hold about you is incorrect, the right to have it rectified
  • The Right To Object
    • If (but we don't) we processed any of your data using technology such as Credit Scoring you could object to this happening
  • The Right To Portability
    • If (and we hope you don't) you wanted to transfer your data to a similar service provider you can request we provide the data for you to do so.

You can contact us at and request any of these rights at any time, or find our more on the ICO website here.

Your right to complain

You have a right to raise a concern if you believe we are not abiding by any of the Principles of GDPR by contacting the ICO here.

What information we collect and for what purpose

Potential Customer

We collect basic information, such as Name, Email, Company, Telephone about potential customers should you enquire about a service from DBR Data.

If you do not become a customer, we will remove this information 1 year from the last point of contact or on your explicit instruction to do so.


We will collect Name, Email, Company, Telephone, Billing and Contract Address, Job Title & Transactional Data.

We will retain this information whilst you are a customer, and a subsequent 7 years to aid in the response to any enquiries that may arise.


We will collect Name, Email, Company & Telephone.

We will retain this information for as long as you are a supplier of goods or services to DBR Data, and for 7 years beyond to assist in any enquiries that may arise.


We will collect any information that is required to support your employment contract, and is legally required for us to do so for the purposes of Employment Law.

We will retain this information for as long as you are an Employee of DBR Data, and for as long as is legally required by relevant laws.

Sensitive Information

We do not collect or process any sensitive data, as deemed sensitive by GDPR

Child Data

We do not collect any data about Children, and none of our services are designed for Children to use.

How we collect your information

We will collect your information from conferences, email enquiries, web contact forms, phone calls, social media (e.g. Linked In).

We may also purchase lists for enquiries, however we will always ensure the list provider has your consent in the first instance.

Where we store your data

For the purposes of operating a business, DBR Data has a Legitimate Interest to store your data. This will either be in the form of our CRM system or our finance package (quotes & invoices).

If you become a customer of one of our software applications, your account details will also be stored in this system.

Third parties that have access to your data

For the purposes of book keeping, our accountants have access to the data we hold in our finance package.

We also use a small selection of businesses for business support, such as Administration & Business Support, who will have restricted access to a small amount of information.

Systems we use

Each business system that we use is either hosted in the EU or a country that has been deemed Adequate by the EU.

Web site tracking

We do track basic usage using Google Analytics on our web sites, this is to enable DBR Data to better understand how our websites are used to enable us to deliver a better service.

Contact Us

If you would like any further information, please use the Contact Us form or email us at 

DBR Data Ltd is registered in a registered Limited Company, Company Reg: 10974143