Last updated: January 2024
Breeze-ferret is committed to ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we meet our obligations under these regulations.
Data Controller
Breeze-ferret acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.
Contact details:
Breeze-ferret
14 Broadcast Lane
London, W1T 4HQ
United Kingdom
Email: [email protected]
Principles of Data Processing
We adhere to the core principles of data protection:
Lawfulness, Fairness, and Transparency
We process personal data lawfully and transparently. Our Privacy Policy clearly explains what data we collect and why.
Purpose Limitation
We collect personal data for specified, explicit, and legitimate purposes. We do not process data in ways incompatible with those purposes.
Data Minimisation
We collect only personal data that is adequate, relevant, and limited to what is necessary for our purposes.
Accuracy
We take reasonable steps to ensure personal data is accurate and kept up to date. You can request correction of inaccurate data at any time.
Storage Limitation
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.
Integrity and Confidentiality
We implement appropriate security measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage.
Legal Bases for Processing
We rely on the following legal bases for processing personal data:
- Performance of a contract: Processing necessary to provide our research services to clients
- Legitimate interests: Processing for business purposes such as improving our services, provided this does not override your rights and interests
- Consent: Where you have freely given informed consent for specific processing activities
- Legal obligation: Processing required to comply with UK law
Your Rights Under UK GDPR
As a data subject, you have the following rights:
Right of Access
You can request confirmation of whether we process your personal data and obtain a copy of that data. We will respond to access requests within one month.
Right to Rectification
You can request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure
In certain circumstances, you can request deletion of your personal data. This right is not absolute and may be limited by our legal obligations or legitimate interests.
Right to Restriction of Processing
You can request that we limit how we use your personal data in certain circumstances.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you can request transfer of your data in a structured, commonly used format.
Right to Object
You can object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
Rights Related to Automated Decision-Making
We do not currently make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request.
We aim to respond to all legitimate requests within one month. If your request is complex or we receive multiple requests, we may extend this period by up to two months, in which case we will inform you.
Data Breach Notification
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
International Data Transfers
Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place, such as:
- Transfers to countries with adequate levels of data protection
- Standard contractual clauses approved by the Information Commissioner
- Other appropriate safeguards as permitted under UK GDPR
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first if possible.
Updates to This Information
We may update this GDPR information periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.