Our commitment to protecting your data rights under UK GDPR.
Last updated: November 2024
Voglitousl is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our approach to data protection and your rights as a data subject.
We adhere to the following principles when processing personal data:
As a data subject, you have the following rights:
You have the right to be informed about how we collect and use your personal data. We provide this information through our Privacy Policy and at the point of data collection.
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond within one month of receiving your request.
You have the right to request deletion of your personal data in certain circumstances, including:
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful but you do not want erasure.
Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. When you object to direct marketing, we will stop processing your data for that purpose.
You have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you. We do not currently use automated decision-making processes.
To exercise any of your data protection rights, please contact us:
We may need to verify your identity before processing your request. We will respond to valid requests within one month, though this period may be extended by a further two months for complex or numerous requests.
For data protection enquiries, please contact our Data Protection lead at [email protected].
We rely on the following legal bases for processing personal data:
We primarily process data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you are not satisfied with our response to a data protection concern, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. Please check this page periodically for updates.