GDPR Compliance

Our GDPR Commitment

calm-vale is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of personal data seriously and have implemented measures to ensure that all data processing activities meet the requirements of applicable data protection law.

Data Controller Information

calm-vale acts as the data controller for personal information collected through this website. As data controller, we determine the purposes and means of processing personal data and are responsible for ensuring that processing complies with data protection principles.

Contact details:
Email: [email protected]
Address: Unit 14, Riverside Business Park, Thames Road, London SE10 0QJ

Data Protection Principles

We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency in all data processing
• Purpose limitation: data collected only for specified, explicit purposes
• Data minimisation: collecting only data that is necessary
• Accuracy: keeping personal data accurate and up to date
• Storage limitation: retaining data only for as long as necessary
• Integrity and confidentiality: ensuring appropriate security measures
• Accountability: demonstrating compliance with these principles

Your Data Subject Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of Access
You have the right to request a copy of the personal data we hold about you. We will respond to such requests within one month.

Right to Rectification
If personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected.

Right to Erasure
You may request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing
You may request that we limit how we use your personal data in certain circumstances.

Right to Data Portability
Where processing is based on consent or contract, you have the right to receive your data in a structured, commonly used format.

Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that significantly affect you.

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided above. We may need to verify your identity before processing your request. We will respond to valid requests within one month, although this period may be extended by two months for complex requests.

Supervisory Authority

If you are not satisfied with how we handle your personal data or your data protection request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

Updates to This Notice

We may update this GDPR compliance notice periodically. Any significant changes will be communicated through our website.

Last updated: September 2024