GDPR Compliance

Last updated: January 2024

Our Commitment to Data Protection

Involfront is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of your personal data seriously and have implemented measures to ensure your rights are respected.

Data Controller

Involfront acts as the data controller for personal information collected through our website and services. This means we determine how and why your personal data is processed.

Contact details:
Involfront
47 Grey Street
Newcastle upon Tyne
NE1 6EE
Email: [email protected]

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right to be Informed

You have the right to know how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR statement.

Right of Access

You can request a copy of the personal data we hold about you. This is known as a Subject Access Request. We will respond to valid requests within one month.

Right to Rectification

If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to requests within one month.

Right to Erasure

Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or you withdraw consent.

Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances, such as while we verify the accuracy of disputed data.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used format.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests. You can also object to processing for direct marketing purposes at any time.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently make automated decisions of this nature.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at:

Email: [email protected]

Or write to us at:
Involfront
47 Grey Street
Newcastle upon Tyne
NE1 6EE

We will respond to your request within one month. In complex cases, we may extend this by a further two months, but we will inform you if this is necessary.

We may need to verify your identity before processing your request. There is no fee for making a request, though we reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests.

Data Protection Principles

We adhere to the following data protection principles:

• Lawfulness, fairness and transparency: We process data lawfully, fairly, and in a transparent manner.
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes.
• Data minimisation: We only collect data that is adequate, relevant, and limited to what is necessary.
• Accuracy: We keep personal data accurate and up to date.
• Storage limitation: We retain data only for as long as necessary.
• Integrity and confidentiality: We process data securely with appropriate technical and organisational measures.
• Accountability: We take responsibility for compliance with these principles.

International Data Transfers

When we transfer personal data outside the UK, we ensure appropriate safeguards are in place. These may include:

• Transfers to countries with adequate data protection (as determined by the UK government)
• Standard contractual clauses approved by the UK government
• Binding corporate rules

Complaints

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: ico.org.uk

Updates to This Statement

We may update this GDPR statement from time to time to reflect changes in our practices or legal requirements. We will post any updates on this page and update the "Last updated" date.