Our Commitment to Data Protection
mistybison is committed to ensuring the protection of personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about our compliance approach and your rights under these regulations.
Data Controller Information
mistybison acts as the data controller for personal data processed through this website and in connection with our consulting services.
Address: 47 Deansgate, Manchester, M3 2BW, United Kingdom
Email: [email protected]
Principles We Follow
In processing personal data, we adhere to the following principles:
Lawfulness, Fairness and Transparency
We process personal data lawfully, fairly, and in a transparent manner. We clearly communicate how and why we use your data through our Privacy Policy and related notices.
Purpose Limitation
We collect personal data for specified, explicit, and legitimate purposes and do not process it in ways incompatible with those purposes.
Data Minimisation
We limit personal data collection to what is necessary for the purposes for which it is processed. We do not collect data beyond our genuine business requirements.
Accuracy
We take reasonable steps to ensure personal data is accurate and, where necessary, kept up to date. You may request rectification of inaccurate data at any time.
Storage Limitation
We retain personal data only for as long as necessary for the purposes for which it was collected, after which it is securely deleted or anonymised.
Integrity and Confidentiality
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage.
Your Rights Under GDPR
As a data subject, you have the following rights:
Right of Access
You may request a copy of the personal data we hold about you. We will respond to such requests within one month, providing the data in a commonly used electronic format.
Right to Rectification
You may request that we correct any inaccurate personal data or complete any incomplete personal data we hold about you.
Right to Erasure
In certain circumstances, you may request that we delete your personal data. This right is not absolute and may be subject to legal retention requirements.
Right to Restriction of Processing
You may request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of data you have disputed.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you may request to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.
Rights Related to Automated Decision-Making
You have rights regarding automated decision-making, including profiling. We do not currently engage in automated decision-making that produces legal or similarly significant effects.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, this period may be extended by a further two months, in which case we will inform you of the extension and the reasons for it.
We do not charge a fee for responding to reasonable requests. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.
Data Protection Officer
Given our current scale of operations, we have not appointed a formal Data Protection Officer. However, data protection queries can be directed to our management team at the contact details provided above.
Data Breach Notification
In the event of a personal data breach that poses a risk to the rights and freedoms of individuals, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach, where feasible. Where the breach is likely to result in a high risk, we will also notify affected individuals without undue delay.
Complaints
If you believe that your data protection rights have been infringed, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
United Kingdom
We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
Updates to This Information
We may update this GDPR compliance information from time to time. Any material changes will be reflected in the last updated date and communicated through our website.
Last updated: September 2024