breeze-finch is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our approach to data protection and your rights as a data subject.
Our Role as Data Controller
For the personal data we collect through our website and direct business interactions, breeze-finch acts as the data controller. This means we determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection requirements.
Data Protection Principles
We adhere to the following principles when processing personal data:
- Lawfulness, fairness and transparency: We process data lawfully, fairly, and in a transparent manner
- Purpose limitation: We collect data for specified, explicit and legitimate purposes
- Data minimisation: We limit data collection to what is necessary for the stated purposes
- Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date
- Storage limitation: We retain data only for as long as necessary
- Integrity and confidentiality: We implement appropriate security measures to protect personal data
- Accountability: We demonstrate compliance with these principles
Your Rights Under UK GDPR
As a data subject, you have the following rights:
Right to Be Informed
You have the right to be informed about how we collect and use your personal data. This information is provided through our Privacy Policy and any additional notices provided at the point of data collection.
Right of Access
You have the right to obtain confirmation that your data is being processed and to access your personal data. You may request a copy of the personal data we hold about you.
Right to Rectification
You have the right to have inaccurate personal data corrected or completed if it is incomplete.
Right to Erasure
In certain circumstances, you have the right to have your personal data erased. This applies where the data is no longer necessary for its original purpose, where you withdraw consent, or where there is no legal basis for continued processing.
Right to Restrict Processing
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object
You have the right to object to processing based on legitimate interests, direct marketing, and processing for research or statistical purposes.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. We do not currently engage in automated decision-making of this nature.
Exercising Your Rights
To exercise any of your rights, please contact us at:
breeze-finch
42 Cathedral Quarter
Belfast, BT1 2AB
Northern Ireland
Email: [email protected]
We will respond to your request within one month of receipt. In complex cases or where we receive numerous requests, this period may be extended by a further two months, in which case we will inform you of the extension and the reasons for it.
Data Breach Procedures
We maintain procedures for detecting, reporting, and investigating personal data breaches. Where a breach is likely to result in a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to affected individuals, we will notify them directly.
International Transfers
If we transfer personal data outside the UK, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner, or transfers to countries with adequacy decisions.
Supervisory Authority
The supervisory authority for data protection in the United Kingdom is the Information Commissioner's Office (ICO). If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the ICO.
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR compliance information periodically to reflect changes in our practices or legal requirements. Any significant changes will be communicated through our website.
Last updated: January 2024