UK Data Privacy Statement

MODIFICATION DATE: 12 MAY 2024 | DOCUMENT REF: PEGASUS-DP-2024-001

1. Introduction and Controller Scope

Welcome to the Privacy Policy of PEGASUS PDS LIMITED. We respect your fundamental right to privacy and are legally committed to protecting your personal data under the Data Protection Act 2018 (DPA 2018) and the UK General Data Protection Regulation (UK GDPR). This policy outlines our protocols for data collection, processing, and storage when you engage with our Coventry-based logistics platform.

2. Data Collection Framework

We process "Personal Data" which refers to any information identifying you as an individual. Our data acquisition is tiered into:
• Identity Data: Full names, corporate titles, and photographic biometric data for courier verification.
• Contact Data: Verified delivery coordinates, electronic mail addresses, and telephonic identifiers.
• Technical Metadata: Internet Protocol (IP) addresses, browser telemetry, time-zone configurations, and device fingerprints used for session security.
• Transaction Data: Historical records of logistics fulfillment and financial settlement pathways.

3. Legal Basis for Processing

Under UK GDPR, we operate under several lawful bases:
• Contractual Necessity: Processing required to fulfill your logistics orders.
• Legal Obligation: Compliance with UK financial reporting and crime prevention laws.
• Legitimate Interests: Necessary for our business growth, provided your fundamental rights do not override these interests (e.g., system optimization).

4. Data Retention and Deletion Protocols

We adhere to the principle of "Storage Limitation." We retain Personal Data only for as long as necessary to fulfill the purposes defined in Section 2. For statutory tax compliance, Identity and Transaction data are retained for a period of six (6) years following the conclusion of a financial cycle. Following this, data is subjected to irreversible cryptographic erasure or total anonymization.

5. Your Statutory Rights

As a data subject in the United Kingdom, you possess:
• The Right of Access (Subject Access Request)
• The Right to Rectification
• The Right to Erasure ("Right to be Forgotten")
• The Right to Restrict Processing
• The Right to Data Portability
To exercise these rights, please contact our Data Protection Officer at info@sovereignfinancial.sbs.

6. The Information Commissioner’s Office (ICO)

You have the right to lodge a complaint at any time with the ICO (www.ico.org.uk). We would, however, appreciate the opportunity to resolve your concerns directly before you approach the regulator.