Your data protection rights

Data controller

The organisation responsible for determining how your personal data is processed is:

Your rights

Under the UK GDPR you hold the following rights in respect of your personal data:

• Right of access (Art. 15 UK GDPR): you may obtain confirmation of whether we process your personal data and receive a copy of it, together with details of how and why it is processed.
• Right to rectification (Art. 16 UK GDPR): you may ask us to correct inaccurate or incomplete personal data about you without undue delay.
• Right to erasure (Art. 17 UK GDPR): you may ask us to delete your personal data once it is no longer required for the purpose it was collected for, or where you have withdrawn consent.
• Right to restrict processing (Art. 18 UK GDPR): you may ask us to restrict processing in defined circumstances, for example while the accuracy of the data is under dispute.
• Right to data portability (Art. 20 UK GDPR): you may receive your data in a structured, commonly used format and transmit it to another controller.
• Right to object (Art. 21 UK GDPR): you may object to processing carried out on the basis of our legitimate interests, including profiling.
• Right to withdraw consent: where processing relies on your consent, you may withdraw that consent at any time.

How to exercise your rights

To exercise any of these rights, please contact us through the contact page. We will respond without undue delay and in any event within one month of receiving your request. We may ask you to verify your identity before we act, in order to protect your data.

Right to lodge a complaint

If you believe our processing of your personal data breaches the UK GDPR, you have the right to lodge a complaint with the relevant supervisory authority. As the controller is based in the United Kingdom, you can contact the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, website: ico.org.uk.

How long we keep your data

Data submitted through the enquiry form is retained only for as long as is necessary to deal with your enquiry, ordinarily no more than 365 days from the date of submission, unless a longer period is required by law.

Legal basis for processing

We process your data on the basis of the freely given, informed consent you provide when completing the enquiry form, in accordance with Article 6(1)(a) UK GDPR and the Data Protection Act 2018. That consent may be withdrawn at any time. For more on how we handle data, see our privacy policy.