GDPR Compliance

fuchsia-geyser is committed to protecting your personal data and respecting your privacy rights in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we comply with these regulations and explains your rights.

Data Controller

fuchsia-geyser is the data controller responsible for your personal data. This means we determine the purposes and means of processing your personal information.

Contact details:
Email: [email protected]
Address: 47 Queen Square, Bristol, BS1 4LH, United Kingdom

Principles of Data Protection

We adhere to the core principles of UK GDPR when processing your personal data:

• Lawfulness, fairness, and transparency: We process data lawfully and are transparent about how we use it
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes
• Data minimisation: We only collect data that is adequate, relevant, and necessary
• Accuracy: We keep personal data accurate and up to date
• Storage limitation: We retain data only for as long as necessary
• Integrity and confidentiality: We process data securely
• Accountability: We take responsibility for complying with these principles

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.

Right to Rectification

You have the right to request correction of inaccurate personal data or completion of incomplete data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data where there is no compelling reason for its continued processing. This right applies in certain circumstances, such as when:

• The data is no longer necessary for its original purpose
• You withdraw consent (where consent was the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restrict Processing

You have the right to request restriction of processing of your personal data in certain circumstances, such as while we verify accuracy or consider your objection to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making systems.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us at:

Email: [email protected]
Address: 47 Queen Square, Bristol, BS1 4LH, United Kingdom

We will respond to your request within one month. In complex cases or where we receive a high volume of requests, we may extend this period by a further two months, but we will inform you if this is the case.

Identity Verification

To protect your privacy, we may ask you to verify your identity before fulfilling your request. This helps ensure that personal data is not disclosed to anyone who does not have the right to receive it.

Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk

We would appreciate the opportunity to address your concerns directly before you contact the ICO, so please reach out to us first.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights, we will also notify you directly.

Updates to This Information

We may update this GDPR compliance information from time to time. We encourage you to review this page periodically for the latest information on our data protection practices.

Last updated: August 2024