GDPR Compliance

Our Commitment to Data Protection

cerulean-ember is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our responsibilities as a data controller seriously and have implemented measures to ensure your personal data is processed lawfully, fairly, and transparently.

Data Controller

cerulean-ember acts as the data controller for personal information collected through this website and our business operations. This means we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection requirements.

Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will respond to such requests within one month of receipt, free of charge in most circumstances.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will make reasonable efforts to update our records promptly.

Right to Erasure

In certain circumstances, you have the right to request deletion of your personal data. This applies when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent for consent-based processing.

Right to Restriction of Processing

You may request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.

Exercising Your Rights

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before processing your request. We aim to respond to all legitimate requests within one month, though complex requests may require an extension of up to two additional months.

Data Protection Principles

We adhere to the following principles when processing personal data:

• Lawfulness, fairness, and transparency: We process data only with a valid legal basis and clearly communicate our practices
• Purpose limitation: We collect data for specified, explicit purposes and do not process it in ways incompatible with those purposes
• Data minimisation: We collect only the data that is adequate, relevant, and necessary
• Accuracy: We take reasonable steps to ensure data is accurate and kept up to date
• Storage limitation: We retain data only for as long as necessary
• Integrity and confidentiality: We implement appropriate security measures to protect data

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in addition to reporting to the Information Commissioner's Office as required.

International Data Transfers

If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office, or transfers to countries with adequate data protection standards.

Complaints

If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom

We encourage you to contact us first so we can try to resolve any concerns directly.

Contact Information

For any questions regarding this GDPR policy or to exercise your data protection rights:

cerulean-ember
47 Commerce Street
Manchester, M2 4WQ
United Kingdom

Email: [email protected]