An informative video....
So for example in my case I use "Roundtracker" spreadsheets which contain customer names, addresses, e-mails and 'phone numbers. I keep the spreadsheets on my laptop which is password protected (only I know the password) & running the latest version of Norton ant-virus, I back them up to an extrenal hard drive (which is also password protected). Any daily work-sheets that I print out which contain customer details I destroy in a cross-cut shredder.
Also posting 'phone/facebook messages from customers on this forum with the customer's personal details showing would also be a breach of GDPR (& probably current data security & privacy rules).
It all sounds a bit 'geeky' but it is really common sense. I know a little bit about this stuff since I've been touching on it in another part-time job that I do.
NB: It may cause additional headaches when selling/buying rounds because you're essentially buying/selling customer data....
So would you approach every one of your customers and confirm their acceptance of you storing that data or not Cookie?
I use George. I've got all of my customers names by asking them in the first place, but having to get them to sign a piece of paper granting me permission to hold their names, addresses, telephone numbers and job pricing and history in digital form will be a major task.
George keeps and everlasting file of customer jobs as a history even after they have been listed as completed. As far as I'm aware the only time you can actually delete a customer's job from the system is to delete all the activity on that job first. Do we have to approach these people as well if we want to keep a record of the job history? (We have had a few non payers over the years and as people's appearance can change over time, I would prefer to retain these people's names for my own future reference.)
On George we can change the name of the customer to "opted out" and remove the telephone number but still retain the job history and price. This keeps the tax recording side straight.
Am I also correct in noting that the British Parliament is still discussing additional 'nuts and bolts' to this EU regulation so hasn't been passed in law as yet. It obviously agrees with the essence of the EU regulation.