GDPR Compliance
Our commitment to protecting your data rights
Saffron-breeze is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we meet our obligations under these regulations.
Data Controller
Saffron-breeze acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.
Contact details:
Email: [email protected]
Address: 47 Heritage Lane, Jewellery Quarter, Birmingham B18 6NQ, United Kingdom
Principles We Follow
In accordance with UK GDPR, we adhere to the following data protection principles:
- Lawfulness, fairness, and transparency: We process data lawfully, fairly, and in a transparent manner
- Purpose limitation: We collect data for specified, explicit, and legitimate purposes only
- Data minimisation: We collect only data that is adequate, relevant, and limited to what is necessary
- Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date
- Storage limitation: We retain personal data only for as long as necessary
- Integrity and confidentiality: We process data securely with appropriate technical and organisational measures
- Accountability: We demonstrate compliance with these principles
Your Rights Under UK GDPR
The UK GDPR provides you with the following rights regarding your personal data:
Right to be Informed
You have the right to know how we collect and use your personal data. Our Privacy Policy provides this information in detail.
Right of Access
You can request a copy of the personal data we hold about you. We will respond to your request within one month.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected.
Right to Erasure
In certain circumstances, you can request that we delete your personal data. This is also known as the "right to be forgotten".
Right to Restrict Processing
You can request that we limit the way we use your personal data while we verify its accuracy or legitimacy of processing.
Right to Data Portability
You can request to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to certain types of processing, including processing for direct marketing purposes.
Rights Related to Automated Decision Making
You have rights in relation to automated decision making and profiling. We do not currently use automated decision-making processes that produce legal or similarly significant effects.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us at [email protected]. We may need to verify your identity before processing your request.
We will respond to all legitimate requests within one month. Occasionally, it may take us longer if your request is particularly complex or you have made multiple requests.
Data Breach Procedures
We have procedures in place to detect, investigate, and report personal data breaches. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware. Where the breach is likely to result in a high risk to you, we will also notify you directly.
Data Protection Impact Assessments
We conduct Data Protection Impact Assessments (DPIAs) when implementing new processes or technologies that may affect the privacy of individuals, particularly those involving large-scale processing of personal data.
Supervisory Authority
The supervisory authority for data protection in the United Kingdom is the Information Commissioner's Office (ICO).
If you are unsatisfied with our response to any data protection issue, you have the right to lodge a complaint with the ICO:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.