GDPR Compliance

Our Commitment to Data Protection

quiet-wrench is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take your privacy seriously and are transparent about how we collect, use, and protect your personal data.

Data Controller

quiet-wrench acts as the data controller for the personal information we collect. This means we determine the purposes and means of processing your personal data.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you submit a consultation request or contact us, you consent to our processing of your information for the stated purposes.
• Contract: When we provide services to you, processing is necessary for the performance of our contract.
• Legitimate Interest: We may process data for our legitimate business interests, such as improving our services, where this does not override your rights.
• Legal Obligation: We may process data when required to comply with legal obligations.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal information we hold about you. We will respond to your request within one month.

Right to Rectification

If you believe the information we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

In certain circumstances, you have the right to request that we delete your personal data. This is also known as the "right to be forgotten."

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or direct marketing.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling in ways that produce legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by two months, and we will inform you if this is necessary.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data where appropriate
• Regular review of security measures
• Staff training on data protection
• Access controls to limit who can access personal data

International Transfers

We do not routinely transfer personal data outside the United Kingdom. If any transfer becomes necessary, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:

Updates to This Information

We may update this page periodically. Any significant changes will be communicated through our website.