GDPR Compliance

comet-jaguar is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our approach to data protection and your rights under these regulations.

Our Role as Data Controller

comet-jaguar acts as the data controller for personal information collected through this website and our services. We determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection laws.

Principles We Follow

We adhere to the core data protection principles:

• Lawfulness, fairness, and transparency: We process data lawfully and inform you about how we use your information
• Purpose limitation: We collect data only for specified, explicit, and legitimate purposes
• Data minimisation: We collect only the data necessary for our stated purposes
• Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date
• Storage limitation: We retain data only for as long as necessary
• Integrity and confidentiality: We implement appropriate security measures to protect personal data
• Accountability: We maintain records and can demonstrate compliance

Your Rights Under GDPR

The GDPR provides you with specific rights regarding your personal data:

Right to Be Informed

You have the right to know how we collect and use your personal data. Our Privacy Policy provides this information.

Right of Access

You can request a copy of the personal data we hold about you. We will respond to access requests within one month.

Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to have it corrected.

Right to Erasure

In certain circumstances, you can request that we delete your personal data. This right is not absolute and depends on the legal basis for processing.

Right to Restrict Processing

You can request that we limit how we process your personal data in certain situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the details below. We may need to verify your identity before processing your request. We will respond to valid requests within one month, though this may be extended by two months for complex requests.

Data Protection Impact Assessments

We conduct Data Protection Impact Assessments when implementing new technologies or processing activities that may pose high risks to individual rights and freedoms.

Data Breaches

We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to individual rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and affected individuals without undue delay.

International Data Transfers

Following the UK's departure from the European Union, we ensure that any transfers of personal data outside the UK are protected by appropriate safeguards, including adequacy decisions, standard contractual clauses, or other approved mechanisms.

Supervisory Authority

The supervisory authority for data protection in the United Kingdom is the Information Commissioner's Office (ICO). If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the ICO:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF

Website: ico.org.uk

Contact Our Data Protection Team

For any questions or requests regarding your personal data or this GDPR statement, please contact:

comet-jaguar
47 Deansgate
Manchester, M3 2BW
United Kingdom

Email: [email protected]

Last updated: October 2024