GDPR Compliance
Understanding your data protection rights under UK GDPR.
Last updated: January 2024
1. Our Commitment to GDPR
osmosis-learning is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we uphold your data protection rights and what steps we take to ensure your personal information is handled responsibly.
2. Data Controller Information
For the purposes of data protection law, osmosis-learning is the data controller responsible for your personal data.
Contact details:
osmosis-learning
47 Greenfield Lane
Bristol BS1 5QR
United Kingdom
Email: [email protected]
3. Your Data Subject Rights
Under UK GDPR, you have the following rights regarding your personal data:
3.1 Right to be Informed
You have the right to know how your personal data is being collected and used. Our Privacy Policy provides this information in detail.
3.2 Right of Access
You can request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
3.3 Right to Rectification
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will action valid requests within one month.
3.4 Right to Erasure
Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
3.5 Right to Restrict Processing
You can request that we limit how we use your personal data while concerns about accuracy or legitimacy are being resolved.
3.6 Right to Data Portability
Where technically feasible, you can request that your personal data be provided to you or transferred to another controller in a structured, commonly used, machine-readable format.
3.7 Right to Object
You can object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
3.8 Rights Related to Automated Decision Making
We do not make automated decisions that produce legal or similarly significant effects. If this changes, you will have rights to human intervention and to challenge such decisions.
4. Lawful Basis for Processing
We only process personal data when we have a valid lawful basis. The bases we rely on include:
- Performance of a contract: Processing your data to provide our pet care services
- Legitimate interests: Processing for business operations, service improvement, and fraud prevention, where these interests do not override your rights
- Consent: Where you have explicitly agreed to specific processing activities, such as marketing communications
- Legal obligation: Processing required to comply with UK law
5. Data Protection Measures
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Secure storage of physical and digital records
- Access controls limiting who can view personal data
- Staff training on data protection responsibilities
- Regular review of data processing activities
- Secure disposal of data no longer needed
6. Data Breach Procedures
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours. If the breach is likely to result in high risk to you, we will also notify you directly without undue delay.
7. International Data Transfers
If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO, or transfers to countries with adequate data protection laws.
8. How to Exercise Your Rights
To exercise any of your data protection rights, please contact us using the details provided above. We may need to verify your identity before processing your request. We do not charge a fee for most requests, though we may charge a reasonable fee for repetitive or excessive requests.
9. Complaints
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
10. Updates to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.