magenta-peak is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we meet our obligations and explains your rights regarding personal data.
Data Controller
magenta-peak acts as the data controller for personal information collected through this website and during our consultation services. We determine the purposes and means of processing personal data.
Contact details:
magenta-peak
47 Colmore Row
Birmingham B3 2BS
United Kingdom
Email: [email protected]
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Consent: When you submit a consultation request or subscribe to communications
- Contract: When processing is necessary to provide services you have requested
- Legitimate interests: For improving our services and ensuring website security
- Legal obligation: When required to comply with applicable laws
Your Rights Under UK GDPR
As a data subject, you have the following rights:
Right to be informed: You have the right to be told how your personal data is being used. This notice and our privacy policy fulfil this requirement.
Right of access: You can request a copy of the personal data we hold about you. We will respond to such requests within one month.
Right to rectification: If you believe the data we hold is inaccurate or incomplete, you can request correction.
Right to erasure: In certain circumstances, you can request deletion of your personal data. This right is not absolute and depends on the legal basis for processing.
Right to restrict processing: You can request that we limit how we use your data while concerns are investigated.
Right to data portability: Where processing is based on consent or contract, you can request your data in a commonly used, machine-readable format.
Right to object: You can object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
Rights related to automated decision-making: We do not use automated decision-making or profiling that produces legal or similarly significant effects.
Exercising Your Rights
To exercise any of these rights, please contact us using the details above. We may need to verify your identity before processing your request. We will respond within one month, though this period may be extended for complex requests.
Data Transfers
We do not transfer personal data outside the United Kingdom. All data processing occurs within UK jurisdiction.
Data Breach Procedures
In the event of a personal data breach that poses a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and affected individuals without undue delay where required.
Complaints
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Updates to This Information
We review our data protection practices regularly. This page will be updated to reflect any changes to our processing activities or compliance measures.
Last updated: January 2024