Last updated: January 2024
hazy-dune is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about how we meet our obligations under these regulations.
Data Controller
hazy-dune acts as the data controller for personal information collected through this website and in the course of providing our services. This means we determine the purposes and means of processing your personal data.
Lawful Bases for Processing
We only process personal data when we have a valid lawful basis to do so. The lawful bases we rely upon are:
Contractual Necessity
When you book an assessment service, we process your personal data as necessary to fulfil our contractual obligations. This includes using your name and contact details to arrange appointments and property addresses to conduct assessments.
Legitimate Interests
We process certain data based on our legitimate business interests, including responding to enquiries, improving our services, and maintaining business records. We always balance our interests against your rights and freedoms.
Consent
Where required, we obtain your explicit consent before processing data. You may withdraw consent at any time by contacting us.
Legal Obligations
In some cases, we are required by law to process personal data, such as for tax and accounting purposes or when required by regulatory bodies.
Your Data Protection Rights
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
Right to Rectification
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to rectification requests within one month.
Right to Erasure
In certain circumstances, you have the right to request deletion of your personal data. This right is not absolute and depends on the specific circumstances of processing.
Right to Restrict Processing
You may request that we restrict processing of your personal data in certain circumstances, such as while we verify accuracy following a rectification request.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used format.
Right to Object
You have the right to object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
Data Protection Measures
We implement appropriate technical and organisational measures to ensure security of personal data, including:
- Encryption of data in transit and at rest
- Access controls and authentication requirements
- Regular security assessments and updates
- Staff training on data protection practices
- Secure disposal procedures for physical and digital records
Data Breach Procedures
We maintain procedures to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.
International Transfers
We do not routinely transfer personal data outside the United Kingdom. Where any transfer is necessary, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Exercising Your Rights
To exercise any of your data protection rights, please contact us:
Email: [email protected]
Address: 47 Greenfield Business Centre, Warwick Road, Birmingham, B27 6QF
We will respond to all requests within one month. In complex cases, this may be extended by a further two months, in which case we will inform you within the first month.
Complaints
If you are dissatisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
ICO website: ico.org.uk
ICO helpline: 0303 123 1113
We encourage you to contact us first so we can attempt to resolve any concerns.