Last updated: January 2024
Our Commitment to Data Protection
blossom-den is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we protect your personal data and your rights under these regulations.
Data Controller
blossom-den acts as the data controller for personal information collected through this website and our services. This means we determine how and why your personal data is processed.
Contact details:
Email: [email protected]
Address: 14 Greenfield Business Park, Cheltenham, GL51 9PL
Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
Consent
Where you have provided explicit consent for specific processing activities, such as receiving marketing communications or submitting enquiry forms.
Contractual Necessity
Where processing is necessary to perform a contract with you, including providing quotations, scheduling assessments, and delivering installation services.
Legitimate Interests
Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights. This includes improving our services, website security, and responding to enquiries.
Legal Obligation
Where processing is necessary to comply with legal requirements, such as maintaining financial records or responding to regulatory requirements.
Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right to Access
You may request a copy of the personal data we hold about you. We will respond to your request within one month.
Right to Rectification
You may request that we correct any inaccurate personal data or complete any incomplete data we hold about you.
Right to Erasure
You may request that we delete your personal data where there is no compelling reason for us to continue processing it. This right is not absolute and may be subject to legal retention requirements.
Right to Restrict Processing
You may request that we limit the way we use your personal data while we address any concerns you have about its accuracy or our legitimate interests for processing.
Right to Data Portability
You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.
Rights Related to Automated Decision-Making
We do not make decisions based solely on automated processing that significantly affect you.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected] with the subject line "Data Protection Request". We may ask you to verify your identity before processing your request.
We will respond to all legitimate requests within one month. If your request is complex or you have made multiple requests, we may extend this by a further two months, in which case we will notify you.
Data Transfers
We primarily store and process your data within the United Kingdom. If we need to transfer data internationally, we ensure appropriate safeguards are in place in compliance with UK GDPR requirements.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where required, notify you directly.
Children's Data
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
We encourage you to contact us first so we can attempt to resolve any concerns directly.
Updates to This Information
We may update this GDPR compliance information periodically. Any significant changes will be communicated through our website.