Last updated: January 2024
serene-storm is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle your personal data in accordance with these regulations.
serene-storm is the data controller responsible for your personal data. We determine the purposes and means of processing personal data collected through our website and services.
Contact details:
serene-storm
47 Ecclesall Road
Sheffield, S11 8PR
United Kingdom
Email: [email protected]
The UK GDPR provides you with specific rights regarding your personal data:
You have the right to be informed about how we collect and use your personal data. This information is provided through our Privacy Policy and this GDPR page.
You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.
If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
Also known as the "right to be forgotten," you can request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
You can request that we limit how we use your personal data while we verify its accuracy or investigate concerns about its use.
Where processing is based on consent or contract and carried out by automated means, you can request your personal data in a structured, commonly used, and machine-readable format.
You can object to the processing of your personal data where it is based on legitimate interests or used for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making processes.
We process personal data on the following lawful bases:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our standard retention periods are:
We implement appropriate technical and organisational measures to protect personal data, including:
We primarily process data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Where the breach is likely to result in a high risk to you, we will notify you directly.
To exercise any of your data protection rights, please contact us using the details provided above. We may ask for verification of your identity before processing your request. There is no fee for most requests, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.