GDPR Compliance

Last Updated: January 2024

Our Commitment to GDPR

Royal-juniper is committed to ensuring compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We respect your privacy and are dedicated to protecting your personal data.

Data Controller Information

Royal-juniper acts as the data controller for personal information collected through our website and services. Our contact details are:

royal-juniper
47 Georgian Square
Bath, BA1 2QH
United Kingdom
Email: [email protected]

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
• Legal Obligation: Where processing is necessary for compliance with legal obligations

Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you, along with information about how we process it.

Right to Rectification

You have the right to request that we correct any inaccurate personal data we hold about you, or complete any incomplete data.

Right to Erasure

In certain circumstances, you have the right to request that we delete your personal data, also known as the "right to be forgotten".

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to certain types of processing, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month of receipt. If your request is complex or we receive numerous requests, we may extend this period by a further two months, and we will notify you accordingly.

We may need to verify your identity before processing your request. There is no charge for exercising your rights, although we may charge a reasonable fee for manifestly unfounded or excessive requests.

Data Protection Principles

We adhere to the following data protection principles:

• Processing personal data lawfully, fairly, and transparently
• Collecting data only for specified, explicit, and legitimate purposes
• Ensuring data is adequate, relevant, and limited to what is necessary
• Keeping data accurate and up to date
• Retaining data only for as long as necessary
• Processing data securely with appropriate technical and organisational measures

International Data Transfers

We primarily process data within the United Kingdom. If we need to transfer data internationally, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with GDPR requirements.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.