GDPR Compliance

Our Commitment to Data Protection

ivoryspan is committed to protecting the personal data of our clients and website visitors in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This page provides information about your rights under data protection law and how we ensure compliance.

Data Controller Information

For the purposes of data protection legislation, the data controller is:

ivoryspan
14 Exchange Street East
Liverpool, L2 3PH
United Kingdom
Email: [email protected]

Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Be Informed

You have the right to receive clear and transparent information about how we collect and use your personal data. This information is provided in our Privacy Policy and at the point of data collection.

Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will address valid rectification requests promptly.

Right to Erasure

Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, including:

• When the data is no longer necessary for the purpose it was collected
• When you withdraw consent (where processing was based on consent)
• When you object to processing and there are no overriding legitimate grounds
• When data has been unlawfully processed

Right to Restrict Processing

You may request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful but you prefer restriction over erasure.

Right to Data Portability

Where processing is based on consent or contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing immediately.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects. We do not currently use automated decision-making in our services.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us:

• Email: [email protected]
• Post: ivoryspan, 14 Exchange Street East, Liverpool, L2 3PH

Please include sufficient information to verify your identity and clearly describe your request. We will respond within one month of receiving your request. In complex cases, this may be extended by up to two additional months, with notification.

Lawful Basis for Processing

We process personal data on the following legal bases:

• Contract: Processing necessary to provide our services to you
• Consent: Where you have given explicit consent for specific processing
• Legitimate Interests: Processing necessary for our business interests, balanced against your rights
• Legal Obligation: Processing required to comply with applicable laws

Data Protection Measures

We implement appropriate technical and organisational measures to ensure data security, including:

• Secure data storage with access controls
• Staff training on data protection requirements
• Regular review of data processing activities
• Data minimisation practices
• Secure disposal of data when no longer needed

Data Breach Procedures

In the event of a personal data breach that poses a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Where the breach is likely to result in high risk to affected individuals, we will also notify them directly without undue delay.

International Transfers

Your personal data is primarily stored and processed within the United Kingdom. If any international transfer is necessary, we ensure appropriate safeguards are in place in compliance with UK GDPR requirements.

Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk

We encourage you to contact us first to allow us the opportunity to address your concerns directly.

Updates to This Information

We may update this GDPR information from time to time. Significant changes will be communicated through our website.