Your data protection rights under UK GDPR
cliff-hopper is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about our data protection practices and your rights as a data subject.
cliff-hopper acts as the data controller for personal information collected through our website and in the course of providing ecological consultancy services. As data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection legislation.
Contact details:
Email: [email protected]
Address: 14 Riverside Business Centre, Redcliffe Way, Bristol BS1 6QN
We adhere to the data protection principles set out in Article 5 of UK GDPR:
We rely on the following lawful bases for processing personal data:
Processing personal data is necessary for the performance of a contract with you or to take steps at your request before entering into a contract. This includes processing enquiries, providing quotations and delivering commissioned services.
We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Our legitimate interests include operating and improving our business, responding to enquiries and maintaining client relationships.
We may process personal data where necessary to comply with legal obligations, such as maintaining financial records or responding to regulatory requirements.
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Under UK GDPR, you have the following rights regarding your personal data:
You have the right to obtain confirmation of whether we process your personal data and, if so, to access that data and receive information about how it is processed.
You have the right to have inaccurate personal data corrected and incomplete data completed.
You have the right to have your personal data erased in certain circumstances, including where it is no longer necessary for the purposes for which it was collected.
You have the right to restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making of this nature.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by up to two months, and we will inform you of any such extension.
We may need to verify your identity before processing your request. There is no fee for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
We do not routinely transfer personal data outside the United Kingdom. Where such transfers are necessary, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us in the first instance.
Last updated: January 2024