Our Commitment to GDPR Compliance
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and your rights under this regulation.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: When you voluntarily provide information through forms or subscriptions
- Contract: When processing is necessary to fulfill our service obligations to you
- Legitimate Interest: When we have a legitimate business interest, such as improving our services
- Legal Obligation: When required by law
Your Rights Under GDPR
Right to Access
You have the right to request access to the personal data we hold about you. We will provide a copy of your data in a commonly used electronic format.
Right to Rectification
If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction.
Right to Erasure
Also known as the "right to be forgotten," you can request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes it was collected.
Right to Restrict Processing
You have the right to request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data where we rely on legitimate interest as the legal basis for processing.
Right to Withdraw Consent
Where we process your data based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
Data Protection Officer
For questions about how we handle your personal data or to exercise your GDPR rights, please contact us at:
[email protected]
42 Bloomsbury Street, London WC1B 3QJ, United Kingdom
Data Transfers
We do not transfer your personal data outside the European Economic Area (EEA). If such transfers become necessary in the future, we will ensure appropriate safeguards are in place to protect your data.
Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Children's Privacy
Our services are not directed to children under 16. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have collected such data, please contact us immediately.
How to Exercise Your Rights
To exercise any of your GDPR rights, please submit a request to [email protected]. We will respond to your request within one month, though this may be extended by two additional months for complex requests.
When submitting a request, please provide:
- Your full name
- Your email address
- A clear description of your request
- Proof of identity (if required for security purposes)
Supervisory Authority
You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, if you believe our processing of your personal data violates GDPR.
In the United Kingdom, the supervisory authority is the Information Commissioner's Office (ICO).