GDPR Compliance

Last updated: September 2024

Our Commitment to Data Protection

Cliffbeaver is committed to complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We take our responsibility to protect your personal data seriously and have implemented measures to ensure compliance.

Data Controller

Cliffbeaver acts as the data controller for personal information collected through this website. Our contact details are:

Address: 14 Kensington Gardens Square, London W2 4BH
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you voluntarily provide information via our contact forms or enquiry requests
• Contract Performance: When processing is necessary to deliver services you have requested
• Legitimate Interests: For improving our services and maintaining business records
• Legal Obligation: When required to comply with applicable laws

Your Data Rights

Under GDPR, you have the following rights:

Right to Access

You can request a copy of the personal data we hold about you. We will respond within one month of receiving your request.

Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You can request deletion of your personal data where there is no compelling reason for continued processing.

Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

Right to Data Portability

You can request your personal data in a structured, commonly used format to transfer to another service provider.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of prior processing.

Data Security Measures

We implement appropriate technical and organisational measures including:

• Secure data storage systems
• Access controls limiting data access to authorised personnel
• Regular security assessments
• Staff training on data protection

Data Breach Procedures

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.

International Transfers

We do not routinely transfer personal data outside the UK or European Economic Area. If such transfers become necessary, we will ensure appropriate safeguards are in place.

Exercising Your Rights

To exercise any of your data rights, please contact us at:

Email: [email protected]
Address: 14 Kensington Gardens Square, London W2 4BH

We will respond to valid requests within one month. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

ICO Contact Details

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk