Our commitment to data protection under UK GDPR
Last updated: September 2024
This page provides information about how ochrearc complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our responsibilities as a data controller seriously and are committed to processing personal data lawfully, fairly, and transparently.
ochrearc acts as the data controller for personal information collected through this website and in connection with our consulting services. This means we determine how and why your personal data is processed.
Contact details:
Email: [email protected]
Address: Unit 14, Harbourside Business Centre, Canon's Road, Bristol BS1 5TX
We only process personal data when we have a valid lawful basis. The lawful bases we rely upon include:
When you actively submit your details through our contact forms, you consent to us processing that information to respond to your enquiry. You may withdraw consent at any time by contacting us.
We may process certain data based on our legitimate business interests, such as improving our services and website functionality, provided this does not override your rights and freedoms.
When you engage our consulting services, we process data necessary to fulfil our contractual obligations to you.
We may process data to comply with legal requirements, such as financial record-keeping obligations.
The UK GDPR provides you with specific rights regarding your personal data:
You have the right to know how your data is being used. This notice and our Privacy Policy fulfil this requirement.
You can request a copy of the personal data we hold about you. We will respond within one month of receiving your request.
If personal data we hold is inaccurate or incomplete, you can request correction.
In certain circumstances, you can request deletion of your personal data. This applies when the data is no longer necessary for its original purpose, you withdraw consent, or processing was unlawful.
You can request that we limit how we use your data while concerns are investigated.
You can request your data in a structured, commonly used format to transfer to another organisation.
You can object to processing based on legitimate interests or for direct marketing purposes.
We implement appropriate technical and organisational measures to protect personal data, including:
We retain personal data only for as long as necessary. Retention periods vary based on the type of data and purpose:
If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the ICO.
To exercise any of your rights, contact us at [email protected]. We may need to verify your identity before processing your request. There is no fee for most requests, though we may charge a reasonable fee for repetitive or unfounded requests.
If you are not satisfied with how we handle your data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113
We review and update this notice periodically to reflect changes in our practices or legal requirements. The date at the top indicates when this notice was last revised.