GDPR Compliance

Our Commitment to Data Protection

glossy-seed is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains your rights and how we uphold them.

Data Controller

glossy-seed is the data controller for personal information collected through this website and our services. Our contact details are:

glossy-seed
42 Chancery Lane
London, WC2A 1PL
[email protected]

Your Rights Under GDPR

Right to Be Informed

You have the right to know how your personal data is being collected and used. Our Privacy Policy provides this information in clear, accessible language.

Right of Access

You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request. We will respond to your request within one month.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. Contact us with the details that need updating.

Right to Erasure

Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or you withdraw consent.

Right to Restrict Processing

You can request that we limit how we use your data while a complaint is being investigated or if you have objected to processing.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used format to transfer to another provider.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making in ways that would trigger these rights.

Lawful Bases for Processing

We process personal data based on one or more of the following lawful bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal obligation: Processing is necessary for us to comply with the law
• Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Regular testing and evaluation of security measures
• Staff training on data protection
• Access controls limiting who can view personal data

Data Breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Where the breach is likely to result in high risk to you, we will also notify you directly.

Exercising Your Rights

To exercise any of your rights, contact us at [email protected]. Please provide sufficient information to verify your identity and specify which right you wish to exercise. We will respond within one month, though this may be extended by two months for complex requests.

Complaints

If you are unhappy with how we handle your personal data, you can contact us to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
www.ico.org.uk