Your information
A clear way to make a privacy request.
You can contact us at any time to ask about the personal data we hold about you or to exercise a data protection right. You do not need to use complicated legal wording or complete a special form.
1
Your data protection rights
Depending on the circumstances, you may have the right to:
request access to the personal data we hold about you;
ask us to correct inaccurate or incomplete personal data;
request deletion of your personal data in certain circumstances;
ask us to restrict how we use your personal data in certain circumstances;
object to processing where we rely on legitimate interests;
request data portability where applicable;
withdraw consent where we rely on consent; and
complain to the Information Commissioner’s Office.
Not every right applies in every situation.
For example, we may need to retain certain information for legal, accounting, tax or record-keeping purposes.
2
How to make a request
To exercise any of your data protection rights, please email:
Email: letstalk@thegdprstudio.co.uk
Subject line: Privacy Request
Email is the simplest and most secure way for us to receive, track and respond to requests.
3
What to include in your request
Please include enough information for us to understand your request and locate the relevant personal data.
Your full name.
The email address or contact details you have used with us.
The right you would like to exercise.
Enough detail about the information, service, booking, resource or communication involved.
Relevant dates or reference details, where available.
You do not need a form or legal wording.
We will only use the information you provide to verify, manage and respond to your request.
4
Identity checks
We may need to verify your identity before responding to a request, particularly where the request involves access to, deletion of or changes to personal data.
Any identity check will be reasonable, proportionate and limited to what is necessary to protect your information from unauthorised access.
5
Response times
We will usually respond without undue delay and within one month of receiving your request.
Where a request is complex, where you have made multiple requests, or where we reasonably need more information to verify your identity or clarify the request, the response period may be extended by up to two further months.
If an extension applies, we will let you know within the initial one-month period and explain why.
6
Fees and requests we cannot fully meet
Data-rights requests are usually free.
However, where a request is manifestly unfounded or excessive, or where you request additional copies of information already provided, we may charge a reasonable administrative fee or refuse to act on the request where permitted by law.
We may also need to limit or refuse part of a request where a legal exemption applies, where responding would disclose another person’s personal data, or where we are required to retain information for legal reasons.
If we cannot fully comply with your request, we will explain why and tell you about your right to complain to the ICO.
7
If you are unhappy with our response
Please contact us first if you are unhappy with how we have handled your request. We will try to resolve the issue fairly and promptly.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.
Information Commissioner’s Office
Website:
ico.org.uk
Telephone: 0303 123 1113
8
Contact details
For privacy questions or data rights requests, please contact:
The GDPR Studio Ltd
Suite A, 82 James Carter Road, Mildenhall, IP28 7DE
Email: letstalk@thegdprstudio.co.uk
Subject line: Privacy Request
