We process your personal data in accordance with our legal obligations under the Data Protection Act 2018 (DPA) and the UK General Data Protection Regulation (UK GDPR).