GDPR Information

Last updated: November 2024

The General Data Protection Regulation (GDPR) provides enhanced rights for individuals regarding their personal data. This page explains how Clayphomop complies with GDPR requirements and outlines your rights as a data subject.

Data Controller

Clayphomop acts as the data controller for personal information collected through this website and our services. We determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection laws.

Contact details:
Clayphomop
47 Heritage Lane
Bristol, BS1 4QR
United Kingdom
[email protected]

Your Rights Under GDPR

Right to Be Informed

You have the right to know how your personal data is being collected and used. Our Privacy Policy provides comprehensive information about our data processing activities.

Right of Access

You may request a copy of the personal data we hold about you. We will respond to such requests within one month of receipt, providing the information free of charge in most circumstances.

Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will make the necessary updates promptly.

Right to Erasure

Also known as the right to be forgotten, you may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected or when you withdraw consent.

Right to Restrict Processing

You may request that we limit how we use your personal data. This right applies in specific situations, such as when you contest the accuracy of data or object to processing.

Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data in certain circumstances, including processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making processes.

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided above. We may need to verify your identity before processing your request. We aim to respond to all valid requests within one month.

Lawful Basis for Processing

We only process personal data when we have a lawful basis to do so:

• Consent: Where you have given clear consent for us to process your data for a specific purpose
• Contract: Where processing is necessary for a contract we have with you
• Legal obligation: Where processing is necessary to comply with the law
• Legitimate interests: Where processing is necessary for our legitimate interests, provided these are not overridden by your rights

Data Protection Measures

We implement appropriate technical and organisational measures to ensure security of personal data, including:

• Encryption of data in transit
• Secure storage systems with access controls
• Regular security assessments
• Staff training on data protection
• Data minimisation practices

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
ico.org.uk