GDPR Compliance

Last updated: November 2024

Peak-marsh is committed to ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle personal data in accordance with these regulations.

Our Commitment

We are committed to:

Processing personal data lawfully, fairly, and transparently
Collecting data only for specified, explicit, and legitimate purposes
Ensuring data is adequate, relevant, and limited to what is necessary
Keeping data accurate and up to date
Retaining data only for as long as necessary
Implementing appropriate security measures

Data Controller

Peak-marsh acts as the data controller for personal data collected through our website and services. We determine the purposes and means of processing personal data.

Contact details:
Peak-marsh
47 Commerce Street
Manchester, M4 1EW
United Kingdom
Email: [email protected]

Types of Data We Process

We may process the following categories of personal data:

Identity Data: Name, title, job position
Contact Data: Email address, business address
Technical Data: IP address, browser type, device information, cookies
Usage Data: Information about how you use our website and services
Communication Data: Your correspondence with us

Lawful Basis for Processing

We rely on the following lawful bases for processing personal data:

Consent: Where you have given clear consent for us to process your data for a specific purpose
Contract: Where processing is necessary to perform a contract with you or take steps before entering into a contract
Legitimate Interests: Where processing is necessary for our legitimate interests, provided these do not override your fundamental rights
Legal Obligation: Where we need to comply with a legal obligation

Your Data Protection Rights

Under the UK GDPR, you have the following rights:

Right to Access: You can request a copy of your personal data and information about how we process it
Right to Rectification: You can request correction of inaccurate or incomplete data
Right to Erasure: You can request deletion of your data in certain circumstances
Right to Restrict Processing: You can request that we limit how we use your data
Right to Data Portability: You can request transfer of your data in a machine-readable format
Right to Object: You can object to processing based on legitimate interests or direct marketing
Rights Related to Automated Decision-Making: You have rights regarding automated decisions that significantly affect you

How to Exercise Your Rights

To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by two months, in which case we will inform you.

We may need to verify your identity before processing your request. There is generally no fee for exercising your rights, although we may charge a reasonable fee for excessive or unfounded requests.

Data Security

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

Encryption of data in transit
Regular security assessments
Access controls and authentication
Staff training on data protection
Incident response procedures

Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk, we will also notify affected individuals without undue delay.

International Transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO or adequacy decisions.

Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk

Updates to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.