Your data protection rights under UK GDPR.
mauve-petal is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we uphold your data protection rights and our responsibilities as a data controller.
mauve-petal is the data controller for personal information collected through this website and in connection with our educational services.
Contact details:
mauve-petal
47 Queens Road
Bristol BS8 1QS
United Kingdom
Email: [email protected]
The UK GDPR provides you with specific rights regarding your personal data:
You have the right to be informed about how we collect and use your personal data. Our Privacy Policy provides this information in detail.
You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
If personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will respond to rectification requests within one month.
Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, including:
This right does not apply where we are legally required to retain data or where retention is necessary for ongoing contractual obligations.
You can request that we limit how we use your data while we verify its accuracy, consider your objection to processing, or if you need us to retain data for a legal claim.
Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.
You have rights related to automated decision-making and profiling. We do not currently use automated decision-making that produces legal or similarly significant effects.
To exercise any of your data protection rights, please contact us at:
Email: [email protected]
We will verify your identity before processing your request. In most cases, we will respond within one month. If your request is complex, we may extend this by a further two months, but we will inform you of any extension within the initial one-month period.
We only process personal data when we have a lawful basis to do so. The bases we rely on include:
We implement appropriate technical and organisational security measures including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours where feasible. If the breach is likely to result in a high risk to your rights, we will also notify you directly.
We primarily store and process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
This GDPR information page was last updated in January 2024. We review our data protection practices regularly and may update this page accordingly.