Your data protection rights under UK GDPR
We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This page provides detailed information about your rights and how we comply with data protection regulations.
For the purposes of data protection legislation, the data controller is:
reef-photon
127 Harborne Lane
Harborne, Birmingham B17 9QE
United Kingdom
Email: [email protected]
We process the following categories of personal data:
We process personal data for the following purposes:
We process your personal data under the following lawful bases:
You have the following rights regarding your personal data:
You have the right to request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
You have the right to request correction of incomplete or inaccurate personal data we hold about you.
You have the right to request deletion of your personal data where there is no good reason for us continuing to process it. Note that we may not always be able to comply with your request due to legal obligations.
You have the right to request that we suspend the processing of your personal data in certain scenarios.
You have the right to request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.
You have the right to object to processing of your personal data where we are relying on legitimate interests and there is something about your particular situation which makes you want to object.
Where we are relying on consent to process your personal data, you have the right to withdraw your consent at any time.
To exercise any of these rights, please contact us via email at [email protected] with the subject line "Data Protection Request".
We will respond to your request within one month of receipt. If your request is complex or you have made multiple requests, we may need to extend this period by up to two further months, in which case we will notify you.
We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.
Typical retention periods:
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way.
We limit access to your personal data to employees and service providers who have a business need to know. They will only process your data on our instructions and are subject to confidentiality obligations.
We do not transfer your personal data outside the United Kingdom. Should this change in the future, we will ensure appropriate safeguards are in place and will update this notice accordingly.
We do not use automated decision-making or profiling in relation to your personal data.
You have the right to make a complaint to the Information Commissioner's Office (ICO) if you believe we have not handled your personal data properly.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
However, we encourage you to contact us first so we can try to resolve any concerns.
We may update this GDPR information from time to time to reflect changes in our practices or for legal or regulatory reasons. We will notify you of any significant changes.
If you have questions about how we handle your personal data or wish to exercise your rights, please contact us at [email protected].