GDPR Compliance

Last updated: September 2024

Our Commitment to Data Protection

glossy-lark.com is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you voluntarily provide information through our contact forms
• Contract: When processing is necessary to fulfill service agreements
• Legitimate Interest: To improve our services and communicate relevant information

Data Controller

glossy-lark.com acts as the data controller for personal information collected through this website. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently.

Your GDPR Rights

Under GDPR, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another organization
• Right to Object: Object to processing of your personal data
• Rights Related to Automated Decision Making: Protection from decisions based solely on automated processing

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Service inquiry data is typically retained for two years following the last contact.

International Data Transfers

Your personal data is stored and processed within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place.

Data Security Measures

We implement appropriate technical and organizational measures including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month.

Complaints

If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK.