GDPR Compliance

Our Commitment to Data Protection

royal-glen is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of personal data seriously and have implemented appropriate measures to ensure compliance with applicable data protection laws.

Data Controller Information

For the purposes of data protection legislation, royal-glen acts as the data controller for personal information collected through this website and in connection with our services.

Contact details:
royal-glen
42 Commerce Street
Manchester, M2 4LQ
United Kingdom
Email: [email protected]

Principles of Data Processing

We adhere to the following principles when processing personal data:

• Lawfulness, fairness, and transparency: We process data lawfully and transparently, providing clear information about how we use personal data.
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes and do not process it in ways incompatible with those purposes.
• Data minimisation: We only collect and process data that is adequate, relevant, and limited to what is necessary.
• Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date.
• Storage limitation: We retain personal data only for as long as necessary for the purposes for which it was collected.
• Integrity and confidentiality: We implement appropriate security measures to protect personal data.

Your Data Subject Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal information we hold about you. We will respond to your request within one month and provide the information free of charge in most circumstances.

Right to Rectification

You have the right to request that we correct any inaccurate personal information or complete any incomplete information we hold about you.

Right to Erasure

In certain circumstances, you have the right to request that we delete your personal information. This right is not absolute and applies where the data is no longer necessary, you withdraw consent, or the data has been unlawfully processed.

Right to Restrict Processing

You have the right to request that we limit how we use your personal information in certain circumstances, such as when you contest the accuracy of the data or object to our processing.

Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects. We do not currently engage in such automated decision-making.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We aim to respond to all legitimate requests within one month, although this may be extended for complex requests.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Complaints

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.

Last updated: January 2024