Your data protection rights under the General Data Protection Regulation
Last updated: January 2024
teal-lagoon is committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about your rights and how we fulfil our obligations under these regulations.
teal-lagoon acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.
Contact details:
Email: [email protected]
Address: 47 Castle Street, Liverpool, L2 9SH, United Kingdom
You have the right to be informed about how we collect and use your personal data. We provide this information through our Privacy Policy and this GDPR page.
You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will make necessary updates without undue delay.
Also known as the right to be forgotten, you may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected, or when you withdraw consent.
You can request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or when processing is unlawful but you do not want erasure.
Where technically feasible, you can request your personal data in a structured, commonly used, machine-readable format, and have it transferred to another organisation.
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making processes.
To exercise any of these rights, please contact us at [email protected] with your request. We may need to verify your identity before processing your request. We aim to respond to all valid requests within one month, though this may be extended by up to two months for complex requests.
Some of our services require processing of special category data, including health information for disability benefit claims. We process such data only with your explicit consent and take additional safeguards to protect this sensitive information.
We do not transfer personal data outside the United Kingdom. All data processing occurs within the UK using UK-based service providers.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where required, communicate the breach to affected individuals without undue delay.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. The current version will always be available on this page.