Our GDPR Commitment

Last updated: 12 December 2019

Introduction

At Progression privacy, security and transparency are the heart of how we think about our product and company. Below we outline the steps we take to ensure we are GDPR compliant.

GDPR compliance

• Ongoing investment in security. Although we're a young company we always seek to meet industry best practices around security and take an iterative approach to continour improvement.
• Clear Terms and Conditions. Our Terms and Conditions and Privacy Policy have been created from the ground up to be GDPR compliant and to clearly communicate what information we collect, what we use it for, who we share it with, what your rights are, and more.
• Data Sub-processors transparency. We list all our 3rd party data sub-processors including what we use them for and where they are located.
• Data Subject Access Request procedure. We accept data access requests that comply with the standard definition of a valid, legal request. Over time we will work to streamline and improve this process.
• Data portability. Customers may request a data and personal information export in a machine-readable format at any time. Over time we will work to provide this through an automated service.

Data portability and right to be forgotten

GDPR grants users of Progression the ‘right to be forgotten’ (or ‘right to erasure’). We will honour valid requests in a timely manner.

Privacy and consent

Privacy and transparency are core to how we build our products and services. In our Privacy Policy we document what information we collect, how we store it, who we share it with and how you can access it.

Contact us

If you have any questions, please contact as at [email protected].