GDPR Statement

Last updated: August 2024

cliff-fable is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This statement explains how we uphold your data protection rights.

Data Controller

cliff-fable acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms
• Legal Obligation: Where processing is necessary to comply with a legal obligation

Your Data Protection Rights

Under the UK GDPR, you have the following rights:

Right of Access

You have the right to request a copy of the personal information we hold about you. We will respond to your request within one month.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we delete your personal data under certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions.

Right to Data Portability

You have the right to request that we transfer your data to another organisation, or directly to you, in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to our processing of your personal data where we are relying on legitimate interests as the legal basis.

Rights Related to Automated Decision Making

You have rights in relation to automated decision making and profiling. We do not currently use automated decision-making processes that significantly affect you.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive a high volume of requests, we may extend this period by up to two months, but we will inform you of any such extension.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

International Transfers

We primarily store and process data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where required, inform you without undue delay.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe that your data protection rights have been infringed. You can contact the ICO at:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Contact

For any data protection queries or requests, please contact:

cliff-fable
Unit 14, Colmore Business District
45 Waterloo Street
Birmingham B2 5TB
Email: [email protected]