GDPR Compliance

Data Protection Principles

We are committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We process personal data in accordance with the following principles:

• Lawfulness, fairness, and transparency in all data processing activities
• Purpose limitation - collecting data only for specified, explicit, and legitimate purposes
• Data minimization - processing only data that is adequate, relevant, and necessary
• Accuracy - maintaining accurate and up-to-date personal information
• Storage limitation - retaining data only as long as necessary
• Integrity and confidentiality - implementing appropriate security measures
• Accountability - demonstrating compliance with data protection principles

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent to receive our services or communications
• Contract performance: When processing is necessary to fulfill our service obligations to you
• Legal obligation: When we must process data to comply with legal or regulatory requirements
• Legitimate interests: When processing is necessary for our legitimate business interests, balanced against your rights and freedoms

Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of Access

You have the right to obtain confirmation of whether we are processing your personal data and, if so, to access that data along with information about how it is being processed.

Right to Rectification

You have the right to request correction of inaccurate personal data and to have incomplete data completed.

Right to Erasure

Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. We do not engage in automated decision-making that would trigger this right.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. Include your full name and the specific right you wish to exercise. We will respond to your request within one month, though this may be extended by two additional months for complex requests.

We may need to verify your identity before processing certain requests to ensure we are disclosing or modifying data only to the appropriate individual.

Data Transfers

Your personal data is processed and stored within the United Kingdom. If we need to transfer data outside the UK or European Economic Area, we will ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay as required by GDPR. We maintain procedures to detect, report, and investigate data breaches.

Data Protection Officer

For questions about our data processing activities or to exercise your rights, you may contact our data protection contact at [email protected].

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates data protection law. In the United Kingdom, the relevant authority is the Information Commissioner's Office (ICO).

Updates to GDPR Compliance

We regularly review our data protection practices to ensure ongoing compliance with GDPR requirements. This page will be updated to reflect any significant changes to our compliance approach.