Your data protection rights under the General Data Protection Regulation
Last updated: August 2024
calm-elm is committed to complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We take your privacy seriously and ensure that your personal data is processed lawfully, fairly, and transparently.
calm-elm acts as the data controller for the personal information we collect. This means we determine how and why your personal data is processed. Our contact details are:
calm-elm
42 Castle Street
Liverpool L2 7LA
United Kingdom
Email: [email protected]
As a data subject, you have the following rights:
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
We process personal data for the following purposes:
We do not transfer personal data outside the United Kingdom or European Economic Area. All data processing occurs within the UK.
Given the nature and scale of our operations, we are not required to appoint a Data Protection Officer. However, we remain fully committed to data protection compliance and can be contacted directly for any privacy-related concerns.
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance information from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.