GDPR Compliance

slate-leaf is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our approach to data protection and your rights under these regulations.

Data Controller

slate-leaf acts as the data controller for personal information collected through this website and our services. We determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection principles.

Data Protection Principles

We adhere to the following principles when processing personal data:

• Lawfulness, fairness, and transparency in all processing activities
• Purpose limitation: data collected only for specified, explicit purposes
• Data minimisation: collecting only what is necessary
• Accuracy: keeping data up to date and correcting inaccuracies
• Storage limitation: retaining data only as long as required
• Integrity and confidentiality: ensuring appropriate security measures
• Accountability: demonstrating compliance with these principles

Your Rights Under GDPR

The GDPR provides individuals with specific rights regarding their personal data:

Right to Access

You may request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.

Right to Rectification

If personal data we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

In certain circumstances, you may request deletion of your personal data. This right applies when data is no longer necessary for its original purpose, when consent is withdrawn, or when data has been unlawfully processed.

Right to Restrict Processing

You may request that we limit how we use your data in specific situations, such as when accuracy is contested or processing is unlawful.

Right to Data Portability

Where processing is based on consent or contract, you may request your data in a structured, commonly used format for transfer to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to requests within one month. In complex cases, this period may be extended by two months with notification.

Data Breach Procedures

In the event of a personal data breach that poses a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Affected individuals will be informed without undue delay when the breach is likely to result in high risk to their rights.

International Transfers

If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. The ICO can be contacted through their website at ico.org.uk.

Last updated: January 2024