GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

ivorygleam is committed to ensuring the security and protection of the personal information that we process, and to providing a compliant and consistent approach to data protection. We have always had a robust and effective data protection programme in place which complies with existing law and abides by the data protection principles.

Data Controller

ivorygleam acts as the Data Controller for the personal data collected through this website. As Data Controller, we determine the purposes and means of processing personal data.

Contact details:
ivorygleam
47 Greenbank Road
Leeds, LS6 4DQ
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as subscribing to our newsletter or submitting an enquiry.
• Contract: Where processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.
• Legal Obligation: Where processing is necessary for us to comply with the law.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

• Right to be Informed: You have the right to be informed about how we collect and use your personal data. This GDPR notice fulfils this requirement.
• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any personal data that is inaccurate or incomplete.
• Right to Erasure: You have the right to request that we delete your personal data in certain circumstances.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data in certain circumstances.
• Rights Related to Automated Decision Making: You have the right not to be subject to a decision based solely on automated processing, including profiling.

Exercising Your Rights

To exercise any of your rights, please contact us at the address provided above. We will respond to your request within one month. In some cases, we may need to extend this period by a further two months if your request is complex or if we receive a large number of requests. We will inform you of any such extension within one month of receiving your request.

There is no fee for exercising your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

Data Security

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Measures to ensure ongoing confidentiality, integrity, availability, and resilience of processing systems
• Processes for regularly testing, assessing, and evaluating the effectiveness of security measures
• Procedures for dealing with personal data breaches

International Transfers

We do not routinely transfer personal data outside the United Kingdom. If such transfers become necessary, we will ensure that appropriate safeguards are in place to protect your personal data and that transfers comply with applicable data protection laws.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements. The specific retention period depends on the nature of the data and the purposes for which it is processed.

Complaints

If you are not satisfied with our response to any enquiry or complaint, or believe that our processing of your personal data does not comply with data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: www.ico.org.uk

Changes to This Notice

We may update this GDPR notice from time to time. We will notify you of any changes by posting the new notice on this page with an updated date. You are advised to review this notice periodically for any changes.