Our commitment to data protection under UK GDPR
brightlark-trail is committed to full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we meet our obligations as a data controller and, in some cases, as a data processor.
For the purposes of UK data protection law, brightlark-trail is the data controller for personal data collected through our website and in the course of providing our services.
Data Controller: brightlark-trail
Address: 47 Clerkenwell Road, London EC1M 5RS, United Kingdom
Email: [email protected]
We process personal data only when we have a lawful basis to do so under Article 6 of UK GDPR:
When you provide explicit consent for us to process your personal data for specific purposes, such as marketing communications or cookie usage beyond essential cookies.
When processing is necessary to fulfill our contractual obligations to you as a client, including delivering consulting services and maintaining client relationships.
When we have a legitimate business interest that does not override your fundamental rights and freedoms. This includes:
When we must process data to comply with legal or regulatory requirements, such as tax obligations and business record retention.
You have the following rights regarding your personal data:
You have the right to clear, transparent information about how we use your personal data. This is provided through our Privacy Policy and this GDPR page.
You can request a copy of the personal data we hold about you. We will provide this within one month of your request, free of charge in most cases.
If your personal data is inaccurate or incomplete, you have the right to have it corrected or completed.
In certain circumstances, you can request deletion of your personal data, including when:
You can request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we have compelling legitimate grounds that override your interests.
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of your rights under UK GDPR, please contact us:
We will respond to your request within one month. In complex cases, we may extend this by two additional months and will inform you of any delay.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
We retain personal data only for as long as necessary:
When we engage third-party service providers who process personal data on our behalf, we ensure:
We are based in the United Kingdom and primarily process data within the UK. If we transfer data internationally, we ensure appropriate safeguards are in place, such as:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will:
We do not knowingly collect or process personal data from individuals under 18 years of age. Our services are directed at business professionals and organizations.
We may update this GDPR compliance information to reflect changes in our practices or legal requirements. The last update date is shown at the top of this page.
If you have questions or concerns about how we handle your personal data, please contact us at [email protected].
You also have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: brightlark-trail.com