Our commitment to data protection and your rights under the General Data Protection Regulation.
Last updated: September 2024
snow-caribou is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our responsibilities as a data controller seriously and have implemented appropriate measures to protect the personal data we process.
snow-caribou acts as the data controller for personal information collected through this website and in the course of our business operations.
Contact details:
snow-caribou
47 Marshall Street
Leeds, LS11 9YJ
United Kingdom
Email: [email protected]
We process personal data only where we have a lawful basis to do so. The specific lawful basis depends on the nature of the processing:
When you submit an enquiry through our website forms, you provide consent for us to process your contact details to respond to your request. You may withdraw this consent at any time by contacting us.
When you engage our consulting services, we process personal data as necessary to perform our contractual obligations, including project delivery, invoicing, and communication about the engagement.
We may process data based on our legitimate business interests where this does not override your fundamental rights. This includes website analytics to improve our services and security measures to protect our systems.
We may process data where required to comply with legal or regulatory requirements, such as tax reporting or responding to lawful requests from authorities.
The UK GDPR provides you with specific rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request, free of charge in most circumstances.
If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to such requests within one month.
In certain circumstances, you have the right to request that we delete your personal data. This right applies when the data is no longer necessary for the purpose it was collected, you withdraw consent, or the data has been unlawfully processed.
You have the right to request that we restrict the processing of your data in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, and machine-readable format.
You have the right to object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, please contact us at [email protected]. We will verify your identity before processing your request and respond within one month. If your request is complex or we receive numerous requests, we may extend this period by up to two months, in which case we will inform you of the extension and the reasons for it.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
We have procedures in place to detect, investigate, and report personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, in addition to notifying the Information Commissioner's Office as required by law.
We primarily process data within the United Kingdom. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Government, or transfer to countries with an adequacy decision.
If you are not satisfied with how we handle your personal data or respond to your rights requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last revised.