GDPR Compliance

lunar-badger is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle personal data and your rights under data protection legislation.

Data Controller

lunar-badger acts as the data controller for personal information collected through our website and in connection with our services. As the data controller, we determine the purposes and means of processing personal data.

Contact details:
lunar-badger
47 Commerce House
Bristol BS1 4QR
United Kingdom
Email: [email protected]

Principles We Follow

We adhere to the data protection principles set out in the UK GDPR:

• Lawfulness, fairness, and transparency: We process data lawfully and are transparent about how we use it
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes
• Data minimisation: We only collect data that is necessary for our stated purposes
• Accuracy: We take steps to ensure personal data is accurate and kept up to date
• Storage limitation: We retain data only as long as necessary
• Integrity and confidentiality: We protect data against unauthorised access and loss
• Accountability: We can demonstrate compliance with these principles

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to Access

You can request a copy of the personal data we hold about you. We will respond to such requests within one month and provide the information free of charge, unless the request is manifestly unfounded or excessive.

Right to Rectification

If you believe the personal data we hold about you is inaccurate or incomplete, you can request that we correct or complete it.

Right to Erasure

In certain circumstances, you can request that we delete your personal data. This right applies when the data is no longer necessary for its original purpose, you withdraw consent, or we have no lawful basis for continued processing.

Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances, such as while we verify the accuracy of your data or consider an objection you have raised.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used, machine-readable format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently engage in such automated decision-making.

Exercising Your Rights

To exercise any of these rights, please contact us at the address above. We may need to verify your identity before processing your request. We will respond within one month, though this period may be extended by two months for complex requests.

Data Breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to you, we will also notify you directly.

Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: ico.org.uk

Updates

We review our data protection practices regularly and may update this information accordingly. Any significant changes will be communicated through our website.

Last updated: January 2024