Your Rights Under GDPR
As a data subject under the General Data Protection Regulation, you have specific rights regarding your personal information. We are committed to upholding these rights and ensuring transparent data processing practices.
Right to Access
You have the right to request access to the personal data we hold about you. This includes the right to obtain confirmation of whether we are processing your data and, if so, to receive a copy of that data along with information about how it is being used.
Right to Rectification
You have the right to request correction of any inaccurate personal data we hold about you. You may also request that incomplete data be completed, taking into account the purposes of the processing.
Right to Erasure
Under certain circumstances, you have the right to request deletion of your personal data. This right applies when:
- The data is no longer necessary for the purposes for which it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
- Deletion is required to comply with a legal obligation
Right to Restriction of Processing
You have the right to request restriction of processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis for processing. You also have the right to object to processing for direct marketing purposes.
Automated Decision-Making
We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: where you have given explicit consent for specific processing activities
- Contractual necessity: where processing is necessary for entering into or performing a contract
- Legal obligation: where processing is required to comply with legal requirements
- Legitimate interests: where processing is necessary for our legitimate business interests
International Transfers
Your personal data is primarily processed and stored within the United Kingdom. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place to protect your information.
Data Protection Officer
For questions regarding your data rights or our GDPR compliance practices, please contact us at [email protected].
Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office if you believe our processing of your personal data violates data protection laws.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month of receipt, though this period may be extended by two months in complex cases.