moor-vertex

Our Obligations

We are committed to complying with the General Data Protection Regulation and UK data protection laws. We process personal data lawfully, fairly, and transparently, collecting only what is necessary for specific purposes.

Legal Basis for Processing

We process personal data on the following legal bases:

Consent: When you voluntarily provide information through contact forms or enquiries
Contract: When processing is necessary to fulfill services you have requested
Legitimate interests: For improving our services and website functionality, provided this does not override your rights
Legal obligation: When required to comply with legal or regulatory requirements

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to access: Request confirmation of what personal data we hold about you and obtain a copy
Right to rectification: Request correction of inaccurate or incomplete personal data
Right to erasure: Request deletion of your personal data under certain circumstances
Right to restriction: Request that we limit how we use your personal data
Right to data portability: Receive your personal data in a structured, commonly used format
Right to object: Object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making: Not be subject to decisions based solely on automated processing

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended by two additional months for complex requests.

We may request specific information from you to confirm your identity before processing your request. This is a security measure to ensure personal data is not disclosed to unauthorized individuals.

Data Security

We implement appropriate technical and organizational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Access to personal data is restricted to employees and service providers who need it to perform their duties. All individuals with access to your data are subject to confidentiality obligations.

Data Transfers

We primarily store and process data within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals without undue delay.

Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state or UK region where you work, normally live, or where an alleged infringement of data protection law occurred.

In the United Kingdom, the supervisory authority is the Information Commissioner's Office, which can be contacted at ico.org.uk.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. The current version will always be available on this page with the date of the most recent update.

Contact

For questions about our GDPR compliance or to exercise your data protection rights, please contact [email protected].