GDPR - scarlet-orchard

Scarlet-orchard is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we meet our obligations under these regulations.

Data Controller

Scarlet-orchard acts as the data controller for personal information collected through this website and in the course of providing our architectural services. As data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection law.

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so. The lawful bases we rely upon include:

Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving communications about our services.
Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests do not override your fundamental rights.
Legal Obligation: Where processing is necessary to comply with a legal obligation to which we are subject.

Your Rights Under UK GDPR

The UK GDPR provides you with specific rights regarding your personal data:

Right to Be Informed

You have the right to receive clear, transparent information about how we use your personal data. This is provided through our privacy policy and this GDPR page.

Right of Access

You have the right to request a copy of the personal data we hold about you. We will respond to such requests within one month.

Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

In certain circumstances, you have the right to request that we delete your personal data. This right is not absolute and may not apply where we have a legitimate reason to retain the data.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of your data.

Right to Data Portability

Where we process your data based on consent or contract, you have the right to receive your personal data in a structured, commonly used format.

Right to Object

You have the right to object to processing based on legitimate interests. We must stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

Data Protection Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

Encryption of personal data where appropriate
Access controls to limit who can view personal data
Regular testing and evaluation of security measures
Staff training on data protection requirements
Secure destruction of data when no longer required

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

International Data Transfers

We do not routinely transfer personal data outside the United Kingdom. Any international transfers will only occur where appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods vary depending on the type of data and the purpose for which it was collected. Details are provided in our privacy policy.

Exercising Your Rights

To exercise any of your rights under the UK GDPR, please contact us at:

scarlet-orchard
47 Whitmore Lane
Oxford, OX2 6PL
United Kingdom

Email: [email protected]

We will respond to all legitimate requests within one month. If your request is particularly complex, we may extend this period by a further two months, in which case we will inform you.

Supervisory Authority

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: ico.org.uk

GDPR Compliance