GDPR Compliance

Last updated: September 2024

Our Commitment to Data Protection

Glowingaspen is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of your personal data seriously and have implemented appropriate measures to ensure compliance with applicable data protection laws.

Data Controller Information

For the purposes of data protection legislation, Glowingaspen acts as the data controller for personal information collected through our website and services.

Contact details:
Glowingaspen
47 Thornton Road
Bradford, BD1 2EP
United Kingdom
Email: [email protected]

Types of Personal Data We Process

We may process the following categories of personal data:

• Identity data: name, title
• Contact data: email address, postal address
• Property preference data: budget range, location preferences, property requirements
• Technical data: IP address, browser type, device information
• Usage data: information about how you use our website

Lawful Bases for Processing

We process personal data under one or more of the following lawful bases:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
• Legal obligation: Where processing is necessary to comply with legal requirements.
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided such interests do not override your fundamental rights and freedoms.

Your Data Protection Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right to be informed: You have the right to know how your personal data is being collected and used.
• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data.
• Right to restrict processing: You have the right to request that we limit the way we use your data.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used format.
• Right to object: You have the right to object to certain types of processing, including direct marketing.
• Rights related to automated decision-making: You have rights related to automated decision-making and profiling.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us using the details provided above. We will respond to your request within one month of receipt. In certain circumstances, we may extend this period by a further two months, in which case we will inform you of this extension and the reasons for it.

You will not usually need to pay a fee to exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

Data Security Measures

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Secure storage of personal data
• Access controls limiting who can access personal data
• Regular review of data protection practices
• Staff training on data protection obligations

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to your rights. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Complaints

If you are dissatisfied with how we have handled your personal data or any privacy query, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
Website: ico.org.uk

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.