Your data protection rights under UK GDPR
Last updated: January 2024
isle-space is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we meet our obligations and how you can exercise your rights.
isle-space is the data controller for personal information collected through this website and in the course of providing our acoustic design and soundproofing services.
Contact:
isle-space
47 Clerkenwell Road
London EC1M 5RS
Email: [email protected]
We only process personal data when we have a lawful basis to do so. The bases we rely on include:
Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes:
Processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights. This includes:
Processing is necessary to comply with legal requirements, such as:
Where we rely on consent, you have the right to withdraw it at any time. This applies to:
You have the following rights regarding your personal data:
You can request a copy of the personal data we hold about you. We will respond within one month of receiving your request.
You can request that we correct any inaccurate or incomplete personal data we hold about you.
You can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
You can request that we limit how we use your personal data while we address concerns you have raised.
You can request a copy of your personal data in a structured, commonly used, machine-readable format.
You can object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making.
To exercise any of these rights, please contact us at [email protected] with:
We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by up to two months for complex requests.
We implement appropriate technical and organisational measures to protect personal data, including:
We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.