Your rights under the UK General Data Protection Regulation.
willow-tern is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we comply with these regulations and your rights as a data subject.
willow-tern acts as the data controller for personal information collected through our website and service delivery. As the data controller, we determine the purposes and means of processing your personal data.
Contact details:
willow-tern
17 Victoria Gardens
Leeds, LS6 1QN
United Kingdom
Email: [email protected]
The UK GDPR provides you with specific rights regarding your personal data:
You have the right to know how your personal data is being collected and used. Our Privacy Policy provides this information in a clear and transparent manner.
You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.
If your personal data is inaccurate or incomplete, you have the right to have it corrected. We will make corrections within one month of your request.
Also known as the right to be forgotten, you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected, or if you withdraw consent.
You can request that we limit how we use your personal data. This right applies in specific situations, such as when you contest the accuracy of data or object to processing.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format.
You have the right to object to processing of your personal data where we are relying on legitimate interests as our legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds.
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.
To exercise any of your rights under UK GDPR, please contact us using the details above. We may ask you to verify your identity before processing your request. We will respond to valid requests within one month, though this may be extended by two months for complex requests.
There is no fee for exercising your rights in most circumstances. However, we may charge a reasonable fee for manifestly unfounded or excessive requests.
We adhere to the following principles when processing personal data:
We rely on the following lawful bases for processing personal data:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Last updated: January 2024