GDPR Compliance

meadow-jaguar is committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we meet our obligations under data protection law.

Data Controller

meadow-jaguar is the data controller for personal data collected through this website and in the course of our business operations. This means we determine the purposes and means of processing personal data.

Data Protection Principles

We adhere to the following principles when processing personal data:

• Lawfulness, fairness and transparency: We process data lawfully and are transparent about how we use it
• Purpose limitation: We collect data for specified, explicit purposes and do not process it in ways incompatible with those purposes
• Data minimisation: We collect only the data necessary for the purposes we have specified
• Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date
• Storage limitation: We retain data only for as long as necessary
• Integrity and confidentiality: We implement appropriate security measures to protect personal data

Lawful Bases for Processing

We rely on the following lawful bases when processing personal data:

Consent

Where we process data based on consent, we ensure that consent is freely given, specific, informed, and unambiguous. You have the right to withdraw consent at any time.

Contractual Necessity

We process data necessary to perform contracts with clients or to take pre-contractual steps at their request.

Legitimate Interests

We may process data for our legitimate business interests where this does not override the rights and freedoms of individuals. We conduct legitimate interest assessments to balance our interests against potential impact on individuals.

Individual Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of Access

You can request a copy of the personal data we hold about you. We will respond to subject access requests within one month.

Right to Rectification

You can request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure

In certain circumstances, you can request deletion of your personal data. This right is not absolute and depends on the legal basis for processing.

Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used format.

Right to Object

You can object to processing based on legitimate interests. We must stop processing unless we demonstrate compelling legitimate grounds.

International Transfers

We generally process personal data within the United Kingdom. If data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Data Breaches

We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to individuals' rights and freedoms, we will notify affected individuals without undue delay.

Exercising Your Rights

To exercise any of your rights under UK GDPR, please contact us at:

Email: [email protected]
Address: Unit 14, Riverside Business Centre, Chapel Street, Manchester, M3 5JZ

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Last updated: October 2024