Your data protection rights under UK GDPR
Last updated: January 2024
crater-beam is committed to protecting your personal data and respecting your privacy rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about how we comply with data protection legislation and your rights as a data subject.
crater-beam is the data controller responsible for your personal data. If you have any questions about this privacy notice or our data protection practices, please contact us:
crater-beam
47 Finsbury Square
London, EC2A 1PQ
United Kingdom
Email: [email protected]
Under data protection law, you have rights including:
You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request". We will provide this information free of charge within one month of receiving your request.
You have the right to request that we correct any personal data you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
You have the right to request that we erase your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent on which processing is based.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when you have objected to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You also have the right to request that we transmit this data directly to another organisation where technically feasible.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes or processing based on legitimate interests.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
We only process your personal data when we have a lawful basis for doing so. The legal bases we rely on include:
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data, and whether we can achieve those purposes through other means.
We primarily process and store your personal data within the United Kingdom. If we transfer your data outside the UK, we ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements, such as standard contractual clauses or adequacy decisions.
To exercise any of your rights, please contact us using the details provided above. We may need to request specific information from you to help us confirm your identity and ensure your right to access the data.
We will respond to your request within one month. If your request is complex or you have made multiple requests, we may extend this period by a further two months and will notify you of this extension.
You will not usually have to pay a fee to exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
We may update this GDPR information from time to time. We will notify you of any significant changes by posting the new information on this page and updating the "Last updated" date.