GDPR Compliance

Our Commitment

We are committed to protecting personal data in accordance with the General Data Protection Regulation and applicable United Kingdom data protection laws. This document outlines how we comply with these regulations and explains your rights as a data subject.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contractual Necessity: Processing required to deliver services you have requested
• Legitimate Interest: Processing necessary for our business operations, provided this does not override your fundamental rights
• Consent: Processing based on explicit consent you have provided, which may be withdrawn at any time
• Legal Obligation: Processing required to comply with legal or regulatory requirements

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data. We will provide this information within one month of your request.

Right to Rectification

You may request correction of inaccurate or incomplete personal data. We will update our records promptly upon verification of corrected information.

Right to Erasure

You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent on which processing is based. This right is subject to legal obligations requiring data retention.

Right to Restriction of Processing

You may request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of data or object to processing based on legitimate interests.

Right to Data Portability

You may request that we provide your personal data in a structured, commonly used, machine-readable format, or transmit it directly to another data controller where technically feasible.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

Right Not to Be Subject to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you. We do not currently engage in such automated decision-making.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with a clear description of your request. We may require verification of your identity before processing requests to ensure data security.

We will respond to requests within one month. If your request is particularly complex or we receive multiple requests from you, we may extend this period by two additional months, in which case we will inform you of the extension and explain the reasons.

Data Transfers

We store personal data within the European Economic Area. In limited circumstances, we may transfer data to trusted service providers operating outside the EEA. When such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Breach Notification

In the event of a data breach likely to result in high risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will delete it promptly.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. The relevant supervisory authority for the United Kingdom is the Information Commissioner's Office.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

Data Protection Officer

For questions regarding our GDPR compliance or data protection practices, contact us at [email protected].

Updates to This Policy

We may update this GDPR compliance information to reflect changes in regulations or our practices. Significant updates will be communicated through our website or directly to affected individuals.