Your data protection rights under the General Data Protection Regulation
bold-heron is committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR). This page provides specific information about how we comply with GDPR requirements.
For the purposes of GDPR, bold-heron acts as the data controller for personal information collected through our website and consulting activities.
Contact details:
bold-heron
42 Brunswick Street
Liverpool, L2 7TL
United Kingdom
Email: [email protected]
We process personal data only when we have a lawful basis to do so under GDPR Article 6:
You have the following rights regarding your personal data:
You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies or for manifestly unfounded or excessive requests.
You have the right to request correction of personal data you believe is inaccurate or incomplete.
You have the right to request deletion of your personal data under certain conditions, including when the data is no longer necessary for the purposes it was collected.
You have the right to request that we restrict processing of your personal data under certain conditions.
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis.
You have the right to request transfer of your personal data to another organization, or directly to you, in a structured, commonly used, and machine-readable format.
Where we are relying on consent to process your personal data, you have the right to withdraw that consent at any time.
To exercise any of your GDPR rights, please contact us at [email protected] with the subject line "GDPR Request" and specify which right you wish to exercise.
We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of any such extension.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.
Retention periods vary depending on the type of data and purpose of processing. When determining retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk from unauthorized use or disclosure, and applicable legal requirements.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required by law.
We primarily process and store data within the United Kingdom. If we transfer personal data outside the UK or European Economic Area, we ensure appropriate safeguards are in place as required by GDPR.
We do not use personal data for automated decision-making, including profiling, that produces legal effects or similarly significantly affects you.
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority.
In the United Kingdom, the supervisory authority is:
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
We may update this GDPR compliance information periodically. Changes will be posted on this page with an updated revision date.