GDPR Compliance
Understanding your rights under data protection regulations
Our Commitment to Data Protection
angliakron7finance is committed to complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We take the protection of your personal data seriously and have implemented measures to ensure your information is processed lawfully, fairly, and transparently.
Data Controller Information
angliakron7finance acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.
Contact details:
Email: [email protected]
Address: 47 Beaumont Street, London W1G 6DQ, United Kingdom
Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
Right to Be Informed
You have the right to be informed about how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR notice.
Right of Access
You have the right to request access to your personal data. This is commonly referred to as a Subject Access Request (SAR). We will provide a copy of your personal data free of charge within one month of receiving your request.
Right to Rectification
You have the right to request correction of inaccurate personal data. If your data is incomplete, you may also request that we complete it.
Right to Erasure
Also known as the right to be forgotten, you may request deletion of your personal data in certain circumstances, including when:
- The data is no longer necessary for its original purpose
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restrict Processing
You may request that we limit the way we use your data in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful but you oppose erasure.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another controller where technically feasible.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. When you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. We do not currently engage in automated decision-making of this nature.
Exercising Your Rights
To exercise any of your rights, please contact us using the details provided above. We will respond to your request within one month. In complex cases, this period may be extended by two additional months, in which case we will inform you of the extension and the reasons for it.
There is no fee for exercising your rights in most circumstances. However, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee or refuse to act on the request.
Data Processing Activities
We process personal data for the following purposes:
- Responding to enquiries and providing consultancy services
- Managing client relationships
- Website analytics and improvement
- Compliance with legal obligations
Legal Bases for Processing
We rely on the following legal bases for processing your personal data:
- Consent: For marketing communications and optional data collection
- Contractual necessity: For delivering services you have requested
- Legitimate interests: For improving our services and protecting our business
- Legal obligation: For compliance with applicable laws and regulations
Data Security Measures
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing. These measures include:
- Encryption of data in transit and at rest where appropriate
- Access controls limiting who can view personal data
- Regular security assessments
- Staff training on data protection
Data Breach Procedures
In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to your rights and freedoms. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you directly without undue delay.
Complaints
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO).
Information Commissioner's Office
Website: ico.org.uk
Helpline: 0303 123 1113
Updates to This Notice
We may update this GDPR notice from time to time. Any changes will be posted on this page with an updated revision date.