GDPR Compliance
Information about our compliance with data protection regulations
stormy-branch is committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we fulfil our obligations under these regulations.
Data Controller Information
stormy-branch acts as the data controller for personal information collected through this website and in the course of providing our consulting services. As data controller, we determine the purposes and means of processing personal data.
Contact details:
stormy-branch
47 Castle Street
Liverpool, L2 9UB
United Kingdom
Email: [email protected]
Principles of Data Processing
We adhere to the following principles when processing personal data:
- Lawfulness, fairness and transparency: We process data lawfully and transparently, providing clear information about how data is used
- Purpose limitation: Data is collected for specified, explicit and legitimate purposes only
- Data minimisation: We collect only data that is necessary for the stated purposes
- Accuracy: We take reasonable steps to ensure data is accurate and kept up to date
- Storage limitation: Data is retained only as long as necessary for processing purposes
- Integrity and confidentiality: Appropriate security measures protect data from unauthorised access or loss
Your Data Subject Rights
Under the UK GDPR, you have the following rights regarding your personal data:
Right to be Informed
You have the right to be informed about the collection and use of your personal data. We provide this information through our Privacy Policy and this GDPR page.
Right of Access
You have the right to request a copy of the personal data we hold about you. This is commonly known as a subject access request. We will respond to valid requests within one month.
Right to Rectification
You have the right to request correction of inaccurate personal data or completion of incomplete data we hold about you.
Right to Erasure
In certain circumstances, you have the right to request deletion of your personal data. This right applies when data is no longer necessary for its original purpose, when you withdraw consent, or when data has been unlawfully processed.
Right to Restrict Processing
You have the right to request restriction of processing in certain circumstances, such as when accuracy is contested or processing is unlawful but you do not wish data to be erased.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.
Rights Related to Automated Decision Making
You have rights relating to automated decision making and profiling. We do not currently make decisions based solely on automated processing that produce legal or similarly significant effects.
Exercising Your Rights
To exercise any of your data protection rights, please contact us at [email protected]. We may ask you to verify your identity before processing your request. We aim to respond to all legitimate requests within one month, though this may be extended by a further two months for complex or numerous requests.
Making a Complaint
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
International Transfers
We primarily process and store personal data within the United Kingdom. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Data Protection Impact Assessments
Where processing operations are likely to result in high risk to individuals' rights and freedoms, we conduct data protection impact assessments to identify and minimise data protection risks.
Last updated: September 2024