Information on this site is advertising in nature

GDPR Compliance

Our commitment to data protection and your rights

Last updated: September 2024

Our Commitment to GDPR

sienna-glade is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of your personal data seriously and have implemented appropriate measures to ensure compliance.

Data Controller

sienna-glade acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data.

Your Rights Under GDPR

The UK GDPR provides you with the following rights regarding your personal data:

Right to Be Informed

You have the right to know how we collect and use your personal data. This is provided through our Privacy Policy and this GDPR notice.

Right of Access

You can request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond to such requests within one month.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to have it corrected. We will respond to rectification requests within one month.

Right to Erasure

Also known as the right to be forgotten, you can request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose or you withdraw consent.

Right to Restrict Processing

You can request that we limit how we use your personal data while we address concerns you have raised about accuracy or our processing activities.

Right to Data Portability

You can request your personal data in a structured, commonly used, machine-readable format to transfer to another service provider.

Right to Object

You have the right to object to processing based on legitimate interests or direct marketing at any time.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making.

Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Consent: Where you have given clear consent for specific processing purposes
  • Contract: Where processing is necessary to fulfil a contract or take pre-contractual steps
  • Legitimate Interests: Where processing is necessary for our legitimate business interests and does not override your rights
  • Legal Obligation: Where processing is required by law

Data Protection Measures

We implement appropriate technical and organisational measures including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Staff training on data protection
  • Access controls and authentication
  • Regular review of data processing activities

Data Breach Procedures

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and communicate with affected individuals where required.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. There is no fee for most requests, though we may charge a reasonable fee for repetitive, excessive, or unfounded requests.

Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Contact

For data protection enquiries, please contact: [email protected] or write to 47 Broadcast House, Media Quarter, Manchester M1 5GE, United Kingdom.