Our Commitment to Data Protection

We are committed to protecting your personal data and respecting your privacy rights in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains your rights and how we fulfill our obligations as a data controller.

Data Controller Information

For the purposes of UK GDPR, the data controller is:

domain
15 Grosvenor Crescent
Belgravia
London SW1X 7EE
United Kingdom

Contact: [email protected]

Your Rights Under UK GDPR

1. Right to Be Informed

You have the right to clear, transparent information about how we collect and use your personal data. This information is provided in our Privacy Policy.

2. Right of Access

You can request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request, unless the request is complex or you have made multiple requests.

3. Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to have it corrected or completed. We will make the correction within one month and notify any third parties with whom we have shared your data.

4. Right to Erasure (Right to Be Forgotten)

You can request deletion of your personal data in certain circumstances, including:

  • The data is no longer necessary for the purpose it was collected
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • Erasure is required to comply with a legal obligation

5. Right to Restrict Processing

You can request that we limit how we use your personal data in certain situations:

  • You contest the accuracy of the data while we verify it
  • Processing is unlawful but you prefer restriction to erasure
  • We no longer need the data but you need it for legal claims
  • You have objected to processing while we verify legitimate grounds

6. Right to Data Portability

You can request that we transfer your personal data to another organization or provide it to you in a structured, commonly used, machine-readable format. This right applies when:

  • Processing is based on consent or contract
  • Processing is carried out by automated means

7. Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

8. Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling processes that significantly affect you. If this changes, we will inform you and explain your rights in this context.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us by email at [email protected]. Please include the following information in your request:

  • Your full name and contact details
  • A clear description of your request
  • Proof of identity (if requesting access to personal data)

We aim to respond to all requests within one month. If your request is particularly complex or you have made multiple requests, we may extend this period by up to two months, and we will notify you if this is necessary.

Data Processing Principles

We adhere to the following data protection principles:

  • Lawfulness, fairness, and transparency: We process data lawfully, fairly, and transparently
  • Purpose limitation: We collect data for specified, explicit, and legitimate purposes
  • Data minimization: We collect only data that is adequate, relevant, and limited to what is necessary
  • Accuracy: We keep personal data accurate and up to date
  • Storage limitation: We retain data only as long as necessary
  • Integrity and confidentiality: We process data securely and protect against unauthorized access
  • Accountability: We take responsibility for compliance and can demonstrate it

Legal Bases for Processing

We process your personal data under one or more of the following legal bases:

  • Consent: You have given explicit consent for specific processing activities
  • Contract: Processing is necessary to fulfill a contract with you or to take steps before entering a contract
  • Legal obligation: Processing is necessary to comply with legal requirements
  • Legitimate interests: Processing is necessary for our legitimate business interests, provided your rights do not override these interests

Data Breach Notification

If we become aware of a personal data breach that poses a risk to your rights and freedoms, we will notify you without undue delay. We will also report the breach to the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it, where required by law.

Data Protection Impact Assessments

When we plan to implement new processing activities that may pose high risks to your data protection rights, we conduct Data Protection Impact Assessments (DPIAs) to identify and minimize these risks.

Third-Party Processors

When we engage third-party service providers to process personal data on our behalf, we ensure:

  • They provide sufficient guarantees of compliance with UK GDPR
  • We have written contracts specifying their data protection obligations
  • They process data only on our documented instructions
  • They implement appropriate security measures

International Data Transfers

We primarily store and process data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:

  • Adequacy decisions by the UK Secretary of State
  • Standard contractual clauses approved by the ICO
  • Binding corporate rules
  • Other mechanisms permitted under UK GDPR

Right to Complain

If you believe we have not handled your personal data appropriately or have concerns about our data protection practices, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom

Telephone: 0303 123 1113
Website: ico.org.uk

We encourage you to contact us first so we can address your concerns directly.

Updates to This Information

We may update this GDPR information page to reflect changes in data protection law or our practices. Significant changes will be communicated through our website.

Contact Us

For any questions about your data protection rights or our GDPR compliance, please contact:

15 Grosvenor Crescent, Belgravia, London SW1X 7EE, United Kingdom