Welund Ltd takes its obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (together, the ‘Data Protection Legislation’) very seriously and is committed to maintaining the highest standards of data protection and information security. Welund regularly obtains professional legal advice to ensure compliance with its statutory responsibilities.
As Welund’s operations involve the collection and reporting of material that may, on occasion, include personal data (as defined under the UK GDPR), Welund is registered with the Information Commissioner’s Office (ICO) under registration number ZB805105. The Data Controller is Mr Lawrence Hardcastle, a member of the Welund management team.
Welund operates as a journalistic and research-based organisation. Accordingly, certain exemptions under the Data Protection Legislation apply – specifically those relating to the processing of personal data for journalistic, academic, artistic, or literary purposes (under Schedule 2, Part 5 of the Data Protection Act 2018), where compliance with certain provisions would be incompatible with such purposes. Welund does not and will not use personal data for direct marketing purposes and, therefore, fully complies with individuals’ rights under Article 21 of the UK GDPR, which provides a right to object to processing for such purposes.
While certain processing activities may be exempt from specific obligations, Welund fully complies with the core principles of data protection, particularly the obligations under Article 5(1)(f) of the UK GDPR, which requires that personal data be processed in a manner that ensures appropriate security. This includes protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organisational measures.
To that end, Welund has implemented the following data security measures:
Access Control
Access to the Welund system is strictly limited to authorised and registered subscribers. Subscriber access is managed via secure authentication mechanisms, including username and password controls. All login activity is monitored and audited by Welund management, and any actual or potential security incidents are promptly investigated and resolved.
Infrastructure Security
Welund’s platform is hosted within a secure UK-based data centre with restricted physical access. The data centre provides 24/7/365 monitoring and support, including rigorous backup, redundancy, and disaster recovery procedures.
Network & Cybersecurity
Advanced anti-malware and antivirus protection is employed to safeguard against malicious threats. Network controls are in place to prevent unauthorised access and to ensure the secure transmission of information.
Business Continuity
The data centre maintains both Business Continuity and Disaster Recovery Plans, incorporating both preventive controls and responsive strategies to ensure service resilience and data integrity.
To ensure compliance with data protection and regulatory obligations, Welund routinely consults legal experts and regularly reviews its data handling policies and security practices.