Privacy Policy

About this Policy

Dated 26/02/2026

The DDC Group International Ltd, registered in the UK at: The Data Solution Centre, Manton Wood Enterprise Park, Worksop, England, S80 2RT under company number 15780609 (DDC), is committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This policy outlines how we achieve this, and includes the information collected when:

• Our website is accessed at www.theddcgroup.com. 

• Enquiries about us or our services are made through either our website at www.theddcgroup.com, by telephone or by email.

• The online chat function is utilized on our website to communicate with our team of agents.

• White paper documents are downloaded from our website.

• You apply for positions within the company.

• You, or a company you represent, engage with us or make an enquiry to DDC for business services.

• You attend events such as exhibitions, business networking, seminars or hospitality.

• Our customers engage DDC to provide outsourced services, and DDC utilizes its own product offerings (applications) to enhance and complement those services, such as by providing automation, artificial intelligence, and reporting.

Definition of Personal Data

Personal Data means any data that relates or pertains to a natural living identifiable person who can be directly or indirectly identified from that data. It includes personal data that we collect using cookies, information that you give to us either via our website, over the telephone or in person, or that is submitted to us when applying for a position within the company.

By providing your personal data directly to us, you acknowledge that we will process your personal data in accordance with this notice.

When using our applications (please refer to our application list elsewhere in this privacy notice), you will be doing so under the terms of use as outlined in our customer’s terms of use or privacy notices.

Who are we?

DDC is a global enterprise comprising of business process solution and outsourcing providers operating in the USA, UK, Europe, and Asia.

Our registered addresses are:

DDC will be considered a "data controller" for all personal data submitted to us by individual persons. “DDC” collectively refers to its staff, contractors and agents who work for or on behalf of the company.

When DDC acts as a processor, the processing is governed by our standard Data Processing Agreements.

Our products

DDC utilizes several of its own products that it has developed for use in conjunction with the outsourced services it provides to its customers.

The product list is as follows:

A current list of sub processors and international transfer destinations is maintained by DDC and will be provided upon request.

DDC Evora audio data is processed under the client’s instructions only; we have contractual prohibitions on the use of data for model training and apply pseudonymisation / encryption in transit and at rest.

DDC explicitly reserves the right to use aggregated, anonymised or pseudonymised data for model training / benchmarking.

How do we collect information from you?

We collect information from you:

• By use of cookies when you access our website at www.theddcgroup.com.

• Via our website contact forms.

• Via email communications.

• Via telephone communications.

• Via our online chat function.

• In person, for example when providing business cards.

• When you submit relevant application data (such as CVs) when applying for positions within the company.
  

What type of information is collected from you via our website?

You will be asked to submit personal information about yourself when you submit requests for information via our website. We will collect this information so we can respond accordingly and fulfil your request for information.

When you make an enquiry, DDC collects the following information:

• Your name

• Your role/position
  

• Your company name
  

• Your e-mail address

• our telephone number

When you access our site(s):

There is “Device Information” about your computer hardware and software that is automatically collected by DDC. This information is:

• Device type (e.g. mobile, computer, laptop, tablet)
  

• Information contained in cookies that have been placed on the device by visiting theddcgroup.com
  

• Operating system
  

• IP address
  

• Browser type
  

• Browser information (e.g., type, language, and history)
  

• Access times
  

• Referring website addresses
  

Careers

You may submit your CV if you’re interested in working for us. To do so, please email us at recruitment@theddcgroup.com. 

We will use information provided by you to assess your application. We will keep it in our records for 12 months from the date of submission unless you request deletion of your information, or you gain employment with us.

How is your information used?

Our use of your personal data will always have a lawful basis, either because it is necessary to assess an application for a position you are applying for within DDC or because it is consensual, and/or in our legitimate interests to provide you with either services directly or information about our services you may have enquired about or received from DDC previously.

We require your information to:

• Respond to your requests for information.

• Assess your application for a work placement.

Occasionally, DDC will collaborate with partners and other third parties in respect of providing various services such as joint events and promotions. With your consent, DDC will share certain information provided by you with those third parties, in order that your experience during the attendance of such events is satisfactory.

Consent can be withdrawn at any time by emailing dpo@theddcgroup.com.

Examples of information that would be shared under such circumstances would include your contact details and dietary requirements.

Who has access to your information?

DDC as either a data controller or data processor, will have access to your information.

We will not sell or lease your personal information to third parties. Any personal information we receive from you will be safeguarded under our obligations to current legislation, or the contractual obligations placed upon us by our customers

You may choose to restrict the collection or use of your personal information at any point.  Please refer to the “Your choices” section of this Privacy Policy for details.

Where our products are used in conjunction with our outsourcing services, such arrangements regarding personal data will be made contractually with our customers. DDC exclusively acts as a data processor in this regard and has no claim to/for/of ownership of the personal data processed via our products at any time.

We may share your contact information with third parties as outlined in the section of this policy entitled “How is your information used?”. Whenever we do so, it will only be shared with your prior consent.

We do not knowingly process children's data at any time.

How and where do we store your information?

We store your information digitally in several different systems, managed and operated by DDC, in its various operations across the group. Please refer to the group table above for further information on our locations.

We make every effort to ensure that your personal data is not transferred outside of the UK/EEA or to countries without an adequacy arrangement in place. Where we are required to do so however, we ensure that adequate safeguarding arrangement are in place, alongside mandatory risk assessments and a robust supply chain due diligence procedure.

Transfers are protected by the UK International Data Transfer Agreement / UK Addendum to the EU SCCs and, where applicable, supplementary measures following the latest EDPB recommendations and any Transfer Risk Assessments.

Where DDC provides the use of its products, in conjunction with outsourced services that it provides to its customers, the products including their respective configurations, will undergo (but not be limited to) the following considerations:

• Data residency

• Encryption

• Data retention

• Access rights

• Terms of use

• Privacy by design

• Data transmission

Profiling

We do not undertake automatic profiling processes on information provided to us. Regarding job applications, we may make use of additional information about you that we would source from LinkedIn should it be available, to help us to assess your job application effectively.

Your choices

You have a right to request a copy of the personal information that DDC holds about you and have any inaccuracies corrected. Any such requests should be made to this email address: dpo@theddcgroup.com.

You have the right to withdraw your consent to us using your personal data at any time and to request that we delete it. We do not keep your personal data for any longer than is necessary considering the reasons outlined in this privacy policy.

Information will be retained for the following periods:

• Website enquiries and requests for information will be reviewed every 6 months. If no contact has been made in a 6-month period, the data will be deleted.

• Job applications and CVs will be stored for 12 months following the date the job application was received. Should the applicant be successful in applying for the position, the applicant's CV will be retained with their employment records and be retained in line with company policy. Please be aware, DDC may contact an applicant in relation to relevant future employment opportunities within the 12-month period such as data is retained for. 

Data is retained only as long as necessary for the purposes stated and in accordance with our retention policy.

Security

Information security and privacy are very important to us, and we will take appropriate measures to safeguard and secure information collected both through our website, our applications and other forms of communications with DDC.

DDC maintains several accreditations across group locations, such as (but not limited to) ISO 27001. For a complete list of our group-wide accreditations, please click here.

Email

From time to time, you may receive email correspondence from us. We take email security and the secure transmission of information in general over this medium, seriously.

To that extent we have produced an email disclaimer which has been published on our corporate website which can be viewed by clicking the following link: https://theddcgroup.com/email-policy.

The link to this policy is transmitted in the footer of all email communications from DDC.

Guest/external users

From time to time, guest/external users may be granted permission to collaborate with internal DDC staff or contractors on documents, applications, and systems within our cloud tenants / networks.

Guest/external users are defined as individuals who do not have a DDC email address or DDC provisioned access credentials of any kind.

Under such an arrangement, we may process personal data of such users including but not limited to the following:

• Identification: Name, email, profile photo, organisation.
• Contact/Communication: Phone, messages, emails, meetings.
• Usage: IP, device, logs, activity.
• Content: Uploaded files/messages (may contain personal data).

No special category data will be processed unless provided.

The purpose of processing is:

• Enable collaboration and access.
• Provide support, security, and monitoring.
• Comply with laws.
• Improve services via analytics.

No automated decisions, profiling, or marketing will be undertaken without prior consent.

The legal basis for processing will be either:

• Contract necessity.
• Legitimate interest.
• Legal obligations.
• Consent where given.

Personal data may be shared as follows:

• Internal staff (need-to-know).
• Sub processors.
• Service providers.
• Authorities if required.

Data will not be retained for longer than is necessary. All data residing in DDC systems is the sole property of DDC and will be fully encrypted at both rest and in transit.

DDC employ all necessary safeguards when transferring your personal data to third countries.

Your rights as a data subject are not affected by your status as a guest/external user as referred to in this privacy notice.

Use of ‘cookies’

Like many other websites, we use cookies. A cookie is a text file that is placed on your device’s storage by a web server which allows the website to recognise you when you visit.

Cookies only collect data about browsing actions and patterns, and aside from your IP address, do not identify you as an individual.

We use cookies for the following purposes:

• Performance and analytics: cookies help us analyse how the services are being accessed and used and enable us to track the performance of the services. For example, we use cookies to determine if you viewed a page or opened an email.

We use Google Analytics 4 to assist with analysing website performance.

You can set your browser to not accept cookies to opt out from receiving cookies placed via our website.

Our website may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any information to them.

What happens if our business changes hands?

We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part. The new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use that data only for the same purposes for which it was originally collected by us.

If any of your data is to be transferred in such a manner, you will be contacted in advance and informed of the changes. When contacted you will be given the choice to have your data deleted or withheld from the new owner or controller.

 For more information, please feel free to contact us at: dpo@theddcgroup.com.

Changes to this statement

DDC will occasionally update this Privacy Policy without notice. DDC encourages you to periodically review this statement to be informed of how DDC is protecting your information.

Contact Information

DDC welcomes your comments regarding this Privacy Policy. If you believe that DDC has not adhered to this Privacy Policy, please contact DDC at dpo@theddcgroup.com. We will use reasonable efforts to determine and remedy any problem discovered.

Your rights

Various data protection regulations in force around the world, provide individuals with certain rights. DDC will uphold the following rights based on the UK GDPR, in respect of all personal data under its controllership. These rights are as follows:

• Right of access
• Right to modification
• Right of rectification
• Right of erasure
• Right to object
• Use of automate decision making and/or profiling
• Right to portability
• Right to restrict processing

In the unlikely event of a personal data breach, we will notify the supervisory authority and, where required, affected individuals in accordance with Articles 33 and 34 of the UK GDPR.

Complaints

DDC will uphold your right to complain about how we have or are processing your personal data. All complaints must be received in writing to dpo@theddcgroup.com.

DDC will aim to initially respond to any complaints by the end of the next business day following receipt of the complaint.

DDC will try to resolve your complaint satisfactorily, however, should you wish to escalate your complaint to the UK’s Supervisory Authority, the contact details for the Information

Commissioner’s Office are below:

Information Commissioner’s Office

Wycliffe House Water Ln

Wilmslow

SK9 5AF

Telephone: 0303 123 1113