GDPR | fabled-myst

Last updated: January 2024

Our Commitment to GDPR

fabled-myst is committed to ensuring that your privacy is protected and that we comply with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page provides information about how we handle your data in accordance with these regulations.

Data Controller

fabled-myst acts as the data controller for the personal information we collect. Our contact details are:

fabled-myst
47 Whitmore Lane
Birmingham B15 2TT
United Kingdom
Email: [email protected]

Legal Basis for Processing

We process your personal data on the following legal bases:

Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights.

Your Rights Under GDPR

Under the GDPR, you have the following rights:

Right to Access: You have the right to request copies of your personal data. We may charge a small fee for this service.
Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
Right to Data Portability: You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period for personal data depends on the context in which we collect it and how we use it.

For enquiry and quote data, we typically retain information for up to 6 years after our last interaction with you, in line with standard business practice and potential legal requirements.

International Transfers

We do not routinely transfer personal data outside the UK or European Economic Area. Where such transfers are necessary, we ensure appropriate safeguards are in place to protect your data.

Data Security

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

Encryption of data in transit and at rest where appropriate
Regular security assessments of our systems
Access controls limiting who can access personal data
Staff training on data protection obligations

Exercising Your Rights

If you wish to exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month of receipt. If your request is complex or you have made multiple requests, we may extend this period by a further two months, but we will inform you of any such extension.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk