Our Commitment to Data Protection
hazelgleam is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognise the importance of protecting personal data and take our responsibilities seriously.
Data Controller Information
For the purposes of UK GDPR, the data controller is:
hazelgleam
47 Kingsway
Stoke-on-Trent, ST4 1JH
United Kingdom
Email: [email protected]
Your Data Protection Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right to Be Informed
You have the right to be informed about the collection and use of your personal data. We provide this information through this page and our Privacy Policy.
Right of Access
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.
Right to Rectification
You have the right to request correction of personal data that is inaccurate or incomplete. We will respond to such requests within one month.
Right to Erasure
Also known as the "right to be forgotten", you may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing
You have the right to request restriction of processing your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
Where we process data based on consent or contract, and processing is automated, you have the right to receive your data in a structured, commonly used format and transfer it to another controller.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.
Rights Related to Automated Decision Making
You have rights related to automated decision-making, including profiling. We do not currently make decisions based solely on automated processing that significantly affect individuals.
Exercising Your Rights
To exercise any of your data protection rights, please contact us at [email protected] with:
- Your full name
- Contact details
- Description of the right you wish to exercise
- Any relevant reference numbers or details
We may need to verify your identity before processing your request. We do not charge a fee for most requests, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
Response Timeframes
We aim to respond to all data protection requests within one month. In complex cases, this may be extended by up to two additional months, in which case we will inform you of the delay and reasons.
Data Protection Principles
We adhere to the following principles when processing personal data:
- Lawfulness, fairness and transparency: Data is processed lawfully and in a transparent manner
- Purpose limitation: Data is collected for specified, explicit and legitimate purposes
- Data minimisation: Data collected is adequate, relevant and limited to what is necessary
- Accuracy: Data is accurate and kept up to date
- Storage limitation: Data is kept only as long as necessary
- Integrity and confidentiality: Data is processed securely
- Accountability: We are responsible for demonstrating compliance
Data Breach Notification
In the event of a personal data breach that poses a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours where feasible. Affected individuals will be notified directly when the breach is likely to result in high risk to their rights and freedoms.
Complaints
If you are dissatisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Updates to This Information
This GDPR compliance information may be updated periodically to reflect changes in our practices or legal requirements. The date of last update is shown at the top of this page.