Your data protection rights under UK GDPR
The UK General Data Protection Regulation (UK GDPR) is the United Kingdom's data protection framework that came into effect following Brexit. It works alongside the Data Protection Act 2018 to set out principles for how organisations must handle personal data.
prairie-puma is committed to complying with UK GDPR and protecting your personal information. This page provides additional information about your rights under this legislation.
prairie-puma is the data controller responsible for your personal information. This means we determine how and why your data is processed.
Our contact details are:
prairie-puma
45 Temple Row
Birmingham B2 5LS
United Kingdom
Email: [email protected]
UK GDPR provides you with specific rights regarding your personal data:
Right to be Informed
You have the right to know how we collect and use your personal data. We provide this information through our Privacy Policy and this GDPR page.
Right of Access
You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.
Right to Rectification
If you believe any data we hold about you is inaccurate or incomplete, you can request that we correct it.
Right to Erasure
Also known as the right to be forgotten, you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
Right to Restrict Processing
You can request that we limit how we use your data while a complaint or query is being resolved.
Right to Data Portability
You can request to receive your personal data in a structured, commonly used format that allows you to transfer it to another organisation.
Right to Object
You can object to the processing of your personal data in certain circumstances, particularly where we process data based on our legitimate interests.
Rights Related to Automated Decision-Making
You have rights relating to automated decision-making and profiling. We do not currently use automated decision-making that produces legal or similarly significant effects.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by up to two months, but we will inform you if this is necessary.
We will not charge a fee for responding to most requests. However, we may charge a reasonable fee if your request is clearly unfounded or excessive, or we may refuse to comply with such requests.
To protect your personal data, we may need to verify your identity before fulfilling your request. We will ask you to provide proof of identity, such as a copy of your passport or driving licence.
We process personal data under the following lawful bases:
We primarily store and process data within the United Kingdom. If we need to transfer your data outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We would appreciate the opportunity to address your concerns before you contact the ICO, so please consider contacting us first.