GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

petal-sable is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we fulfil our obligations and protect the rights of individuals whose personal data we process.

Data Controller Information

petal-sable acts as the data controller for personal information collected through this website and our educational services. As data controller, we determine the purposes and means of processing personal data and are responsible for compliance with data protection legislation.

Contact details:
Email: [email protected]
Address: 47 Victoria Square, Birmingham B1 1BD, United Kingdom

Principles We Follow

We adhere to the core principles of data protection:

• Lawfulness, fairness, and transparency: We process data lawfully, fairly, and in a transparent manner
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes
• Data minimisation: We only collect data that is adequate, relevant, and necessary
• Accuracy: We keep personal data accurate and up to date
• Storage limitation: We retain data only for as long as necessary
• Integrity and confidentiality: We process data securely with appropriate safeguards
• Accountability: We take responsibility for compliance and can demonstrate it

Your Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Be Informed

You have the right to be informed about how we collect and use your personal data. This information is provided through this page and our Privacy Policy.

Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.

Right to Rectification

You have the right to request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.

Right to Restrict Processing

You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of your data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

You have rights related to automated decision making and profiling. We do not currently engage in automated decision making that produces legal effects.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at [email protected] with your request. We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests.

Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) when introducing new technologies or processing activities that may pose high risks to individuals' rights and freedoms.

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. In the event of a breach that poses a risk to individuals' rights, we will notify the Information Commissioner's Office within 72 hours and affected individuals without undue delay.

Training and Awareness

Our staff receive training on data protection principles and procedures relevant to their roles. We maintain awareness of regulatory updates and adapt our practices accordingly.

Supervisory Authority

The supervisory authority for data protection in the United Kingdom is the Information Commissioner's Office (ICO). If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the ICO.

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk