Our commitment to data protection under the General Data Protection Regulation
Last updated: January 2024
Periwinkle-heath is committed to ensuring that your personal data is protected in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page provides information about how we comply with these regulations and the rights you have regarding your personal data.
Periwinkle-heath acts as the data controller for personal information collected through our website and services. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable data protection laws.
Periwinkle-heath
47 Grosvenor Lane
London, SW1A 2DX
United Kingdom
Email: [email protected]
We process personal data only when we have a lawful basis to do so. The lawful bases we rely upon include:
The GDPR provides you with the following rights:
You have the right to request a copy of the personal data we hold about you and to check that we are lawfully processing it.
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
You have the right to request that we delete your personal data where there is no compelling reason for us to continue processing it.
You have the right to request that we restrict the processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of your rights under the GDPR, please contact us using the details provided above. We will respond to your request within one month of receiving it. In some cases, we may extend this period by two months where necessary, and we will inform you if this is the case.
There is no fee for exercising your rights in most cases. However, we may charge a reasonable fee if your request is clearly unfounded or excessive, or we may refuse to comply with your request in such circumstances.
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
We do not routinely transfer personal data outside the United Kingdom or European Economic Area. Should any transfer be necessary, we will ensure appropriate safeguards are in place in accordance with GDPR requirements.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
United Kingdom
Website: ico.org.uk
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.