Last updated: September 2024
Rustic-lotus is committed to protecting the personal data of our website visitors and clients in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we comply with these regulations and explains your rights regarding your personal data.
Rustic-lotus acts as the data controller for personal data collected through this website and in the course of providing our services.
Contact details:
Email: [email protected]
Address: 47 Victoria Street, Manchester, M3 2QW, United Kingdom
We process personal data only when we have a lawful basis to do so. The legal bases we rely on include:
Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications or using non-essential cookies.
Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Where processing is necessary for our legitimate interests or those of a third party, provided those interests do not override your fundamental rights and freedoms. Our legitimate interests include:
Where processing is necessary to comply with a legal obligation to which we are subject.
Under the UK GDPR, you have the following rights:
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.
You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, including:
You have the right to request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have challenged.
Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects.
To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond within one month, though this period may be extended by two months for complex requests.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods are determined based on:
If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where required, notify affected individuals without undue delay.
If you are not satisfied with how we handle your personal data or your data protection requests, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
We encourage you to contact us first so we can try to resolve your concerns.
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated date.