GDPR Compliance Statement
We are committed to protecting your personal data in accordance with the General Data Protection Regulation and UK data protection laws.
Data Controller
For the purposes of data protection legislation, we are the data controller responsible for your personal information.
Contact details:
15 Market Street
Nottingham NG1 6HY
United Kingdom
[email protected]
Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Contract: Processing is necessary to perform our consulting services under our agreement with you
- Legal obligation: We must retain certain records to comply with legal and regulatory requirements
- Legitimate interests: Processing is necessary for our legitimate business interests, such as responding to inquiries and improving our services
- Consent: For certain processing activities, we rely on your explicit consent, which you may withdraw at any time
Your Rights Under GDPR
You have the following rights regarding your personal data:
Right to Access
You can request a copy of the personal data we hold about you. We will provide this information within one month of your request.
Right to Rectification
If you believe any information we hold about you is inaccurate or incomplete, you can request that we correct or complete it.
Right to Erasure
You can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You can request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data.
Right to Data Portability
You can request that we transfer your personal data to another organization or directly to you in a structured, commonly used format.
Right to Object
You can object to processing of your personal data where we rely on legitimate interests as the legal basis for processing.
Rights Related to Automated Decision Making
We do not use automated decision-making or profiling in our service delivery.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two additional months, in which case we will inform you.
Right to Lodge a Complaint
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office, the UK's data protection supervisory authority:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk
Data Protection Impact Assessments
We conduct Data Protection Impact Assessments for processing activities that may pose high risks to your rights and freedoms, ensuring appropriate safeguards are in place.
International Transfers
We do not transfer your personal data outside the United Kingdom. Should this change in the future, we will ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office within 72 hours of becoming aware of the breach.
Last updated: July 2024