GDPR Compliance Information

Your rights under UK General Data Protection Regulation

Our Commitment to Data Protection

voltic-glow is committed to protecting your personal data and respecting your privacy rights under the UK General Data Protection Regulation (UK GDPR). This page provides detailed information about how we comply with data protection law and what rights you have regarding your personal information.

Data Controller

For the purposes of UK GDPR, the data controller is:

voltic-glow
27 Churchill Way
Cardiff CF10 2WX
United Kingdom
Email: [email protected]

What Personal Data We Collect

We collect and process the following categories of personal data:

Identity Data

Contact Data

Educational Data

Technical Data

Usage Data

Lawful Basis for Processing

We only process your personal data when we have a lawful basis to do so. The legal grounds we rely on include:

Consent

We process certain data based on your explicit consent, particularly:

You have the right to withdraw consent at any time by contacting us.

Contract Performance

We process data necessary to:

Legal Obligation

We process data to comply with legal requirements, including:

Legitimate Interests

We process data based on legitimate interests to:

We always balance our interests against your rights and will not process data in ways you would not reasonably expect.

Your Rights Under UK GDPR

You have comprehensive rights regarding your personal data:

1. Right to Be Informed

You have the right to clear, transparent information about how we use your personal data. This page and our Privacy Policy fulfill this obligation.

2. Right of Access

You can request a copy of the personal data we hold about you. This is commonly known as a "subject access request." We will provide this information free of charge within one month.

3. Right to Rectification

If you believe any data we hold about you is inaccurate or incomplete, you can request correction. We will update the information within one month.

4. Right to Erasure ("Right to Be Forgotten")

You can request deletion of your personal data in certain circumstances:

Note that this right is not absolute. We may need to retain certain information to comply with legal obligations (e.g., safeguarding records).

5. Right to Restrict Processing

You can request that we stop processing your data (but continue storing it) in certain situations:

6. Right to Data Portability

Where processing is based on consent or contract performance and is carried out by automated means, you can request your data in a structured, commonly used, machine-readable format. You can also request that we transfer this data directly to another organization where technically feasible.

7. Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. If you object to direct marketing, we will stop immediately. For other objections, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

8. Rights Related to Automated Decision-Making

You have rights related to automated decision-making and profiling. We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of the rights described above, please contact us:

We will respond to your request within one month. In complex cases, we may extend this by up to two additional months, in which case we'll explain the reason for the delay.

You will not normally have to pay a fee to exercise your rights. However, we may charge a reasonable fee or refuse to comply if a request is clearly unfounded, repetitive, or excessive.

We may need to verify your identity before fulfilling your request to ensure we're not disclosing data to an unauthorized person.

Children's Data

Our services involve working with children and teenagers. We take additional precautions when processing children's data:

Data Security Measures

We implement appropriate technical and organizational measures to protect your data:

Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected:

International Data Transfers

We are based in the United Kingdom and primarily store data within the UK. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as:

We will notify you if your data will be transferred internationally and explain the safeguards in place.

Data Breach Notification

If we experience a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. We will also notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of a breach where required.

Third-Party Data Processors

We may use third-party service providers who process data on our behalf, including:

All third-party processors are carefully selected and required to:

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated to you via email or prominent notice on our website.

Questions and Complaints

If you have questions about our GDPR compliance or wish to make a complaint, please contact us first:

Email: [email protected]

You also have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.voltic-glow.com

Further Information

For more details about how we collect and use your data, please see our: