GDPR Compliance

Our Commitment to Data Protection

quaint-spring.com is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws. This page outlines how we comply with GDPR principles.

Data Controller

For the purposes of GDPR, the data controller is:

quaint-spring
47 Kingsway Studios
Holborn
London WC2B 6TE
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you submit forms or voluntarily provide information
• Legitimate interests: To respond to inquiries, improve our services, and conduct business operations
• Legal obligation: When required to comply with applicable laws

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restrict Processing

You have the right to request restriction of processing your personal data in certain circumstances.

Right to Data Portability

You have the right to request transfer of your personal data to another organization or directly to you in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects concerning you. We do not engage in automated decision making.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request.

We may need to verify your identity before processing your request. This is a security measure to ensure personal data is not disclosed to unauthorized persons.

Data Protection Principles

We adhere to the following GDPR data protection principles:

• Lawfulness, fairness, and transparency: We process data lawfully and transparently
• Purpose limitation: Data is collected for specified, explicit, and legitimate purposes
• Data minimization: We only collect data that is necessary
• Accuracy: We keep personal data accurate and up to date
• Storage limitation: Data is retained only as long as necessary
• Integrity and confidentiality: We implement appropriate security measures
• Accountability: We are responsible for and can demonstrate compliance

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, as required by GDPR.

International Data Transfers

If we transfer your personal data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Transfers to countries with adequate data protection laws
• Binding corporate rules

Children's Data

We do not knowingly process personal data of children under 16 years of age without parental consent.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk

Updates to This Policy

We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

For any questions about GDPR compliance or to exercise your rights, please contact us at [email protected]