GDPR Information
Understanding your data protection rights under UK GDPR.
Our Commitment to Data Protection
birch-whale is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we comply with these regulations and outlines your rights as a data subject.
Data Controller Information
birch-whale acts as the data controller for personal information collected through this website. Our contact details are:
- Address: 17 Clerkenwell Road, London, EC1M 5RD, United Kingdom
- Email: [email protected]
Lawful Basis for Processing
We process personal data under the following lawful bases:
Consent
When you submit a contact form, you consent to us processing your information to respond to your enquiry. You may withdraw consent at any time by contacting us.
Contractual Necessity
When you engage our services, we process data necessary to fulfil our contractual obligations, including project management, invoicing, and service delivery.
Legitimate Interests
We may process data for legitimate business interests, such as improving our services, maintaining security, and communicating relevant updates. We always balance these interests against your rights and freedoms.
Your Rights Under UK GDPR
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to request correction. We will respond within one month.
Right to Erasure
You may request deletion of your personal data where there is no compelling reason for its continued processing. This right is not absolute and applies in specific circumstances, such as when data is no longer necessary for the original purpose.
Right to Restrict Processing
You can request that we limit how we use your data in certain circumstances, such as while we verify the accuracy of data you have challenged.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used format.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects concerning you.
Exercising Your Rights
To exercise any of these rights, contact us at [email protected] with your request. We may ask for proof of identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests.
Data Protection Impact Assessments
Where processing activities are likely to result in high risk to individuals, we conduct Data Protection Impact Assessments to identify and minimise risks.
Data Breach Procedures
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.
Supervisory Authority
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Updates to This Information
We review our data protection practices regularly and will update this page as necessary. Material changes will be communicated via our website.