We will only send your personal data outside the EEA in the following situations:
To comply with a legal obligation;
It is necessary for the performance of a contract;
We use service providers with servers located in other countries.
If we do transfer your personal data outside the EEA, we will use one of these safeguards to make sure it is protected:
We will only transfer it to a non-EEA country which the European Commission has decided has an adequate level of protection for personal data. You can find more about such countries here: https://ec.europa.eu/info/law/law-topic/data-protection_en;
We will put a written contract in place between us and the recipient that incorporates European Commission model clauses relating to the transfer of personal data outside the EEA. You can find out more about such clauses here: ICO/international transfers;
We will only transfer it to businesses that have signed up to a special agreement between the UK and the USA known as the Privacy Shield. You can find out more and search the Privacy Shield List here: https://www.privacyshield.gov/welcome