dazzle-sweep

1. Introduction

Dazzle-sweep is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements and what rights you have regarding your personal data.

2. Data Controller

For the purposes of GDPR, the data controller is:

Dazzle-sweep
47 Culinary Lane
Kensington
London W8 5RJ
United Kingdom
Email: [email protected]

3. Lawful Basis for Processing

We process your personal data under the following lawful bases:

Consent: When you voluntarily provide information through forms or accept cookies
Contract: When processing is necessary to fulfill services you have requested
Legitimate Interests: For business operations, security, and service improvement
Legal Obligation: When required to comply with legal requirements

4. Your Rights Under GDPR

You have the following rights regarding your personal data:

4.1 Right of Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies if requests are manifestly unfounded or excessive.

4.2 Right to Rectification

You have the right to request correction of inaccurate personal data and to have incomplete data completed.

4.3 Right to Erasure

You have the right to request deletion of your personal data under certain conditions, including when the data is no longer necessary for the purpose it was collected.

4.4 Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain circumstances.

4.5 Right to Data Portability

You have the right to request transfer of your personal data to another organization or directly to you in a structured, commonly used, and machine-readable format.

4.6 Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing.

4.7 Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. We do not currently engage in such automated decision making.

5. How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request. This period may be extended by two additional months where necessary, taking into account the complexity and number of requests.

When making a request, please provide:

Your full name
Email address associated with your data
Specific details about your request
Proof of identity if required

6. Data Protection Principles

We adhere to the following GDPR data protection principles:

Lawfulness, fairness, and transparency: We process data lawfully, fairly, and transparently
Purpose limitation: We collect data for specified, explicit, and legitimate purposes
Data minimization: We collect only data that is adequate, relevant, and necessary
Accuracy: We keep personal data accurate and up to date
Storage limitation: We retain data only as long as necessary
Integrity and confidentiality: We process data securely with appropriate safeguards
Accountability: We are responsible for and can demonstrate compliance

7. Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

Encryption of personal data
Regular security assessments
Access controls and authentication
Staff training on data protection
Incident response procedures

8. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach where required.

9. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

Standard contractual clauses approved by the European Commission
Adequacy decisions by the European Commission
Binding corporate rules

10. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and purpose of processing.

11. Children's Data

Our services are not directed at children under 16 years of age. We do not knowingly collect or process personal data of children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

12. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In the United Kingdom, the supervisory authority is:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: www.ico.org.uk

13. Updates to GDPR Compliance

We regularly review our GDPR compliance practices and may update this information. Please check this page periodically for updates. Material changes will be communicated through our website.

14. Contact Us

For any questions about our GDPR compliance or to exercise your rights, please contact us at:

Email: [email protected]
Address: 47 Culinary Lane, Kensington, London W8 5RJ, United Kingdom