Your data protection rights under UK GDPR
reef-bison is committed to protecting your personal data and respecting your privacy rights. We comply fully with the UK General Data Protection Regulation and the Data Protection Act 2018.
For the purposes of data protection legislation, reef-bison is the data controller responsible for your personal information collected through this website.
reef-bison
42 Colmore Row
Birmingham B3 2BS
United Kingdom
Email: [email protected]
You have the right to clear, transparent information about how we use your personal data. This information is provided in our Privacy Policy and this GDPR page.
You can request a copy of the personal data we hold about you. This is known as a Subject Access Request. We will provide this information free of charge within one month of receiving your request.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to your request within one month.
Also known as the "right to be forgotten," you can request deletion of your personal data under certain circumstances, including:
You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
Where processing is based on consent or contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to processing of your personal data based on legitimate interests. If you object, we must stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
We do not use automated decision-making or profiling on this website.
To exercise any of these rights, contact us at [email protected]. Please include the following information in your request:
We may need to verify your identity before processing your request. This is a security measure to ensure personal data is not disclosed to unauthorised parties.
We will respond to requests to exercise your rights within one month of receiving your request. In complex cases, this may be extended by up to two additional months, and we will inform you of any extension and the reasons for it.
If you are unhappy with how we have handled your personal data or believe we have violated data protection law, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: ico.org.uk
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of the breach. If the breach poses a high risk to you, we will also notify you directly without undue delay.
We do not routinely transfer personal data outside the United Kingdom. If such transfers become necessary for service provision, we will ensure appropriate safeguards are in place as required by UK GDPR.
We implement data protection principles into our business processes and systems from the earliest stages of design. This includes:
We review this information regularly and update it as necessary to reflect changes in legislation or our data processing practices.