GDPR Compliance
Your data protection rights under the UK General Data Protection Regulation
Last updated: January 2024
Our Commitment to Data Protection
stillmarten is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take your privacy seriously and ensure that personal data is processed lawfully, fairly, and transparently.
Data Controller
For the purposes of data protection legislation, the data controller is:
stillmarten
Unit 7, Parkway Business Centre
Princess Road, Manchester M14 7LU
Email: [email protected]
Your Rights Under UK GDPR
The UK GDPR provides you with the following rights:
Right to Be Informed
You have the right to know how your personal data is being collected and used. This information is provided in our Privacy Policy and this GDPR notice.
Right of Access
You can request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
Right to Rectification
If personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected.
Right to Erasure
Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, including:
- The data is no longer necessary for its original purpose
- You withdraw consent (where consent was the basis for processing)
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restrict Processing
You can request that we limit how we use your data while concerns are investigated.
Right to Data Portability
Where technically feasible, you can request your data in a structured, commonly used, machine-readable format to transfer to another organisation.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making processes.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Contract: To fulfil our contractual obligations to you
- Consent: Where you have explicitly agreed to processing
- Legitimate Interests: Where we have a valid business reason that does not override your rights
- Legal Obligation: Where we must comply with legal requirements
Data Security Measures
We implement appropriate technical and organisational measures including:
- Secure storage systems with access controls
- Staff training on data protection
- Regular review of data processing activities
- Secure disposal of data no longer required
International Data Transfers
We do not routinely transfer personal data outside the United Kingdom. Should such transfer become necessary, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Exercising Your Rights
To exercise any of your data protection rights, please contact us:
Email: [email protected]
Post: stillmarten, Unit 7, Parkway Business Centre, Princess Road, Manchester M14 7LU
We will respond to your request within one month. In complex cases, this may be extended by a further two months, and we will inform you if this is necessary.
Complaints
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Updates to This Notice
We may update this GDPR notice periodically to reflect changes in our practices or legal requirements. Please check this page regularly for updates.