spirequill

Last updated: January 2024

Our Commitment to GDPR Compliance

spirequill is committed to protecting the privacy and security of personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we ensure compliance and your rights as a data subject.

Data Controller Information

spirequill acts as the data controller for personal information collected through this website and in the course of providing our services.

Contact Details:
Email: [email protected]
Address: 47 Whiteladies Road, Bristol BS8 2LS

Principles of Data Processing

We adhere to the following principles when processing personal data:

Lawfulness, Fairness, and Transparency

We process personal data lawfully, fairly, and in a transparent manner. We clearly inform individuals about how their data will be used.

Purpose Limitation

We collect personal data for specified, explicit, and legitimate purposes and do not process it in ways incompatible with those purposes.

Data Minimisation

We only collect personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

Accuracy

We take reasonable steps to ensure personal data is accurate and kept up to date. Inaccurate data is rectified or erased without delay.

Storage Limitation

We keep personal data in a form that permits identification for no longer than is necessary for the purposes for which it is processed.

Integrity and Confidentiality

We process personal data in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Be Informed

You have the right to be informed about the collection and use of your personal data. This includes information about the purposes of processing, retention periods, and who your data will be shared with.

Right of Access

You have the right to request access to your personal data and to obtain confirmation as to whether or not your data is being processed. You can request a copy of your personal data free of charge.

Right to Rectification

You have the right to have inaccurate personal data rectified or completed if it is incomplete.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request the restriction or suppression of your personal data in certain circumstances.

Right to Data Portability

You have the right to obtain and reuse your personal data for your own purposes across different services. This applies to data you have provided to us based on consent or contract.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision Making

You have rights in relation to automated decision making and profiling. We do not currently use automated decision making that produces legal or similarly significant effects.

Exercising Your Rights

To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, this period may be extended by two further months, in which case we will inform you of the extension and the reasons for it.

We may request proof of identity before processing your request to ensure we are releasing information to the correct person.

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. We will also notify the Information Commissioner's Office within 72 hours of becoming aware of such a breach.

International Data Transfers

We do not routinely transfer personal data outside the United Kingdom. Should any transfer be necessary, we will ensure appropriate safeguards are in place in compliance with UK GDPR requirements.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.