The new EU GDPR rules come into force from 25 May 2018. They mainly concern the recording and processing of personal information.
PPOL is already compliant with the new GDPR rules.
PPOL's customer is the adviser Firm. A Firm may have one User login or more than one. Each User has Clients and may record personal and financial Data within the PPOL system.
The Firm is the Data Controller for their Clients' Data.
The Data Controller is responsible for obtaining any necessary consent from a Client and for deleting any Data if requested to do so by a Client.
Data is NOT shared between Users or between Firms or with any third party.
Client Data is only processed on request by a User to download a Report. Reports are downloaded and stored on the User's computer - they are not stored anywhere else.
All Data is stored and all processing occurs in a secure data centre within the UK.