GDPR Compliance

Last updated: January 2024

Our Commitment to Data Protection

Sprout-orbit is fully committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of personal data seriously and have implemented appropriate measures to ensure that all personal data is processed lawfully, fairly, and transparently.

Data Controller Information

Sprout-orbit acts as a data controller for the personal information we collect through our website and services. Our contact details are:

Sprout-orbit
47 Cartwright Gardens
London, WC1H 9EL
United Kingdom

Email: [email protected]

Your Data Protection Rights

Under the UK GDPR, you have the following rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will respond to such requests within one month.

Right to Rectification

You have the right to request that we correct any personal data that is inaccurate or incomplete.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose for which it was collected.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes or where we are processing based on legitimate interests.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects concerning you. We do not currently engage in automated decision-making.

Lawful Basis for Processing

We ensure that all processing of personal data has a valid lawful basis. The lawful bases we rely upon include:

• Consent: Where you have freely given, specific, informed, and unambiguous consent
• Contract: Where processing is necessary to fulfil our contractual obligations to you
• Legitimate Interests: Where processing is necessary for our legitimate business purposes and does not unduly affect your rights
• Legal Obligation: Where processing is required to comply with applicable law

Data Protection Principles

We adhere to the core principles of data protection:

• Lawfulness, Fairness, and Transparency: We process data lawfully and transparently
• Purpose Limitation: We collect data for specified, explicit, and legitimate purposes
• Data Minimisation: We only collect data that is adequate, relevant, and necessary
• Accuracy: We take reasonable steps to ensure data remains accurate and up to date
• Storage Limitation: We retain data only for as long as necessary
• Integrity and Confidentiality: We process data securely with appropriate protections
• Accountability: We can demonstrate compliance with these principles

International Data Transfers

We primarily store and process data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Breach Notification

In the event of a personal data breach, we have procedures in place to detect, report, and investigate such breaches. Where required, we will notify the Information Commissioner's Office and affected individuals in accordance with legal requirements.

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the details above. We may need to verify your identity before processing your request. We will respond to legitimate requests within one month, though this period may be extended for complex requests.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: ico.org.uk

Updates to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.