GDPR Compliance

Our Commitment to Data Protection

blossom-magpie takes data protection seriously. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides specific information about how we handle your personal data in accordance with these regulations.

Data Controller

blossom-magpie acts as the data controller for personal information collected through this website and our consulting services. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection legislation.

Contact details:

blossom-magpie
45 Queen Street
Edinburgh EH2 3NH
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data only when we have a valid lawful basis. The specific basis depends on the nature of processing:

• Contract performance: Processing necessary to deliver consulting services you have engaged
• Legitimate interests: Processing for business purposes where this does not override your fundamental rights, including responding to enquiries and improving our services
• Consent: Where you have given specific consent for particular processing activities, such as receiving marketing communications
• Legal obligation: Processing required to comply with laws applicable to our business

Your Rights Under UK GDPR

The UK GDPR provides you with specific rights regarding your personal data:

Right to Be Informed

You have the right to receive clear information about how we collect and use your personal data. This page and our Privacy Policy fulfil this requirement.

Right of Access

You can request a copy of the personal data we hold about you. We will respond to such requests within one month and provide the information free of charge in most circumstances.

Right to Rectification

If personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will respond to rectification requests within one month.

Right to Erasure

Also known as the right to be forgotten, you can request deletion of your personal data in certain circumstances, including where the data is no longer necessary for its original purpose or where you withdraw consent.

Right to Restrict Processing

You can request that we limit how we use your personal data in certain situations, such as while we verify accuracy following a rectification request.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you can request your personal data in a structured, commonly used, machine-readable format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have rights regarding automated decision-making and profiling that produces legal or significant effects. We do not currently engage in such processing.

Exercising Your Rights

To exercise any of your data protection rights, please contact us by email at [email protected] or by post at our office address. We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware. Where the breach is likely to result in high risk, we will also notify affected individuals directly.

Data Protection Impact Assessments

For processing activities likely to result in high risk to individuals, we conduct Data Protection Impact Assessments to identify and minimise data protection risks.

Supervisory Authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

We encourage you to contact us first so we can address your concerns directly.

Updates

This GDPR information page may be updated periodically to reflect changes in legislation or our practices. Please check back regularly for any updates.

Last updated: September 2024