GDPR Compliance

Your Data Protection Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have specific rights regarding your personal data. prime-willow is committed to respecting and facilitating these rights.

Right to Be Informed

You have the right to be informed about the collection and use of your personal data. We provide clear information about:

• What personal data we collect
• Why we collect and use your data
• How long we retain your data
• Who we share your data with
• Your rights and how to exercise them

This information is detailed in our Privacy Policy.

Right of Access

You have the right to access your personal data and receive a copy of the information we hold about you. This is known as a Subject Access Request. To make such a request, please contact us using the details provided at the end of this page.

We will respond to your request within one month, though this may be extended by two additional months for complex requests. There is no charge for this service unless your request is manifestly unfounded or excessive.

Right to Rectification

You have the right to have inaccurate personal data rectified or completed if it is incomplete. If you believe any information we hold about you is incorrect or incomplete, please contact us, and we will correct it promptly.

Right to Erasure

Also known as the "right to be forgotten," you can request the deletion of your personal data in certain circumstances, including:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

This right is not absolute and may not apply if we need to retain the data for legal reasons or to establish, exercise, or defend legal claims.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain situations:

• You contest the accuracy of the data
• Processing is unlawful, but you prefer restriction over erasure
• We no longer need the data, but you need it for legal claims
• You have objected to processing pending verification of our legitimate grounds

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where:

• The processing is based on consent or contract
• The processing is carried out by automated means

Right to Object

You have the right to object to processing of your personal data where:

• We process data based on legitimate interests
• We use data for direct marketing purposes
• We process data for research or statistical purposes

If you object to direct marketing, we will stop processing your data for that purpose immediately.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. We do not currently engage in automated decision-making of this nature.

Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights

To exercise any of the rights outlined above, please contact us:

Email: [email protected]
Address: prime-willow, 123 Division Street, Sheffield S1 4GE, United Kingdom

When making a request, please provide sufficient information to allow us to identify you and verify your identity. We may request additional information if necessary to confirm your identity.

Our Commitment to Data Protection

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Pseudonymization and encryption of personal data
• Ensuring ongoing confidentiality, integrity, and availability of systems
• Regular testing and evaluation of security effectiveness
• Staff training on data protection principles and practices

Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify you without undue delay, in accordance with our legal obligations under UK GDPR.

International Data Transfers

We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.

Lodging a Complaint

If you believe we have not complied with your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

Contact Our Data Protection Officer

For questions about our data protection practices or to exercise your rights, please contact us:

prime-willow
123 Division Street
Sheffield S1 4GE
United Kingdom
Email: [email protected]