Our Commitment to GDPR
Bloom-mountain is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of personal data seriously and have implemented measures to ensure compliance with all applicable data protection requirements.
Data Controller Information
Bloom-mountain acts as a data controller for personal data collected through this website and in the course of providing our services.
Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ
Contact: [email protected]
Principles of Data Processing
We adhere to the following data protection principles:
- Lawfulness, fairness, and transparency: We process data lawfully and transparently, providing clear information about our processing activities.
- Purpose limitation: We collect data for specified, explicit, and legitimate purposes and do not process it in ways incompatible with those purposes.
- Data minimisation: We ensure data collected is adequate, relevant, and limited to what is necessary.
- Accuracy: We take reasonable steps to ensure personal data is accurate and up to date.
- Storage limitation: We retain data only for as long as necessary for the stated purposes.
- Integrity and confidentiality: We process data securely using appropriate technical and organisational measures.
- Accountability: We maintain documentation and procedures demonstrating our compliance.
Your Rights Under UK GDPR
As a data subject, you have the following rights:
Right of Access
You may request a copy of the personal data we hold about you. We will respond to valid requests within one month.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you may request its correction.
Right to Erasure
You may request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purpose it was collected.
Right to Restrict Processing
You may request that we limit the processing of your data in specific situations, such as while verifying accuracy following a challenge.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
We do not engage in automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.
Exercising Your Rights
To exercise any of these rights, please contact us in writing. We may need to verify your identity before processing your request. There is no charge for most requests, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
Data Breaches
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Affected individuals will be notified directly when there is a high risk to their rights and freedoms.
Third-Party Processing
Where we engage third-party processors, we ensure appropriate contracts are in place requiring them to protect personal data and process it only on our documented instructions.
International Transfers
We primarily process data within the United Kingdom. Any transfers to countries outside the UK are made in compliance with Chapter V of the UK GDPR, using appropriate safeguards such as standard contractual clauses or adequacy decisions.
Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR information periodically to reflect changes in our practices or legal requirements. The current version will always be available on this page.
This page provides information about our GDPR compliance and does not constitute legal advice. For specific questions about your data protection rights, please contact us or seek independent legal counsel.