Information presented on this website is advertising in nature

GDPR Compliance

turquoise-frost is committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our approach to data protection compliance.

Data Controller

turquoise-frost acts as the data controller for personal information collected through this website and in connection with our consulting services. We determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection legislation.

Lawful Basis for Processing

We process personal data on one or more of the following lawful bases:

  • Consent: Where you have given clear consent for us to process your personal data for specific purposes
  • Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
  • Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject
  • Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights

Data Subject Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of Access: You may request a copy of the personal data we hold about you
  • Right to Rectification: You may request correction of inaccurate or incomplete personal data
  • Right to Erasure: You may request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: You may request that we limit how we use your data
  • Right to Data Portability: You may request transfer of your data to another organisation in a structured format
  • Right to Object: You may object to processing based on legitimate interests or for direct marketing
  • Rights Related to Automated Decision Making: You have rights regarding decisions made solely by automated means

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, this period may be extended by a further two months, in which case we will inform you of the extension and the reasons for it.

Data Protection Officer

Given our size and the nature of our processing activities, we have not appointed a formal Data Protection Officer. However, data protection queries should be directed to [email protected].

International Transfers

We primarily process data within the United Kingdom. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with data protection legislation.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing. These measures include encryption of data in transit, access controls, and regular security assessments.

Data Breach Procedures

We have procedures in place to detect, investigate, and report personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

Last updated: January 2024