GDPR Compliance

nimble-cascade is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we ensure your rights are protected under these regulations.

Data Controller

For the purposes of data protection legislation, nimble-cascade is the data controller responsible for your personal information. Our contact details are provided at the bottom of this page.

Principles of Data Processing

We adhere to the following principles when processing personal data:

• Lawfulness, fairness, and transparency: We process data lawfully, fairly, and in a transparent manner.
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes.
• Data minimisation: We limit data collection to what is necessary for the stated purposes.
• Accuracy: We take reasonable steps to ensure personal data is accurate and up to date.
• Storage limitation: We retain data only for as long as necessary.
• Integrity and confidentiality: We implement appropriate security measures to protect your data.

Your Rights Under GDPR

The UK GDPR provides you with several rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly referred to as a Subject Access Request.

Right to Rectification

You can request that we correct any personal data that is inaccurate or incomplete.

Right to Erasure

In certain circumstances, you have the right to request that we delete your personal data. This right is not absolute and may be subject to legal obligations requiring us to retain certain information.

Right to Restriction of Processing

You can request that we restrict the processing of your personal data in specific circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

Where processing is based on consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

You have rights in relation to automated decision making and profiling. We do not currently use automated decision making processes that significantly affect you.

Exercising Your Rights

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month of receipt. In complex cases or where we receive numerous requests, this period may be extended by two further months, in which case we will inform you of the extension.

We may need to verify your identity before processing your request. There is generally no fee for exercising your rights, although we may charge a reasonable fee for manifestly unfounded or excessive requests.

Data Protection Officer

As a small business, we are not required to appoint a Data Protection Officer. However, all data protection enquiries should be directed to our main contact address.

Complaints

If you are dissatisfied with how we have handled your personal data or your data protection request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Contact Information

For any questions regarding this GDPR statement or your data protection rights:

nimble-cascade
47 Greenbank Road
Liverpool L18 1HQ
United Kingdom

Email: [email protected]

Last updated: September 2024