Your data rights (UK GDPR)

Data controller

The controller responsible for your personal data is:

Your rights

Under the UK GDPR, you have the following rights over your personal data:

• Right of access (Art. 15 UK GDPR): you have the right to confirmation that we are processing your personal data, and to a copy of it along with information about how and why it is processed.
• Right to rectification (Art. 16 UK GDPR): you have the right to ask us to correct inaccurate or incomplete personal data about you without undue delay.
• Right to erasure (Art. 17 UK GDPR): you have the right to ask us to delete your personal data once it is no longer needed for the purposes it was collected for, or where you have withdrawn your consent.
• Right to restrict processing (Art. 18 UK GDPR): you have the right to ask us to restrict processing of your data in certain situations, for example while you dispute its accuracy.
• Right to data portability (Art. 20 UK GDPR): you have the right to receive your data in a structured, commonly used format and to transmit it to another controller.
• Right to object (Art. 21 UK GDPR): you have the right to object to processing of your data based on our legitimate interests, including profiling.
• Right to withdraw consent: where processing is based on your consent, you have the right to withdraw it at any time.

How to exercise your rights

To exercise any of the rights above, please contact us through the contact page. We will respond without undue delay, and in any event within one month of receiving your request. We may ask you to confirm your identity in order to protect your data.

Right to lodge a complaint

If you believe our processing of your personal data breaches the UK GDPR, you have the right to lodge a complaint with the relevant supervisory authority. As the controller is based in the United Kingdom, you can contact the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, website: ico.org.uk.

How long we keep your data

Data submitted through the contact form is kept only for as long as necessary to deal with your enquiry, generally no more than 365 days from the date it was sent, unless the law requires a longer retention period.

Legal basis for processing

We process your data on the basis of your freely given, informed consent (Art. 6(1)(a) UK GDPR), given when you complete the contact form, in line with the Data Protection Act 2018. You have the right to withdraw this consent at any time. For more on how we handle data, see our privacy policy.