GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

jade-reef is committed to ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We respect your privacy and are dedicated to protecting your personal data in accordance with these regulations.

Data Controller

jade-reef acts as the data controller for the personal information we collect. As data controller, we are responsible for deciding how we hold and use personal information about you.

Contact details: [email protected]
Address: 142 Greenwood Lane, Bristol, BS1 4QR, United Kingdom

Your Rights Under GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month of receiving it.

Right to Rectification

You have the right to request that we correct any personal data that is inaccurate or incomplete. We will respond to your request within one month.

Right to Erasure

Also known as the "right to be forgotten," you can request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected, or if you withdraw consent where consent was the basis for processing.

Right to Restrict Processing

You have the right to request that we limit the way we use your personal data in certain circumstances, for example, if you contest the accuracy of the data or object to our processing of it.

Right to Data Portability

Where we process your data based on consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller.

Right to Object

You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis, or where we are processing your data for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. We do not currently engage in automated decision-making that would fall under this provision.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contract: Processing necessary for the performance of a contract with you (such as providing pet care services)
• Consent: Where you have given clear consent for us to process your personal data for a specific purpose (such as marketing communications)
• Legitimate Interests: Processing necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests
• Legal Obligation: Processing necessary for compliance with a legal obligation

Data Transfers

We primarily store and process data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office.

Data Protection Officer

For any questions about our data protection practices or to exercise your rights, please contact us at: [email protected]

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). We would, however, appreciate the opportunity to address your concerns directly before you approach the ICO.

ICO contact details: www.ico.org.uk

How to Exercise Your Rights

To exercise any of your rights, please contact us using the details provided above. We may need to verify your identity before processing your request. There is no fee for exercising your rights, although we may charge a reasonable fee or refuse to comply with requests that are manifestly unfounded or excessive.