GDPR Compliance

glossy-gleam is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines your rights and our obligations.

Data Controller

glossy-gleam is the data controller responsible for your personal data. Our contact details are:

glossy-gleam
47 Rosemary Lane
Covent Garden
London WC2E 8HQ
Email: [email protected]

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Contract: Processing necessary for the performance of a contract with you (e.g., booking confirmations, service delivery)
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services
• Consent: Where you have given specific consent for marketing communications
• Legal obligation: Processing required to comply with legal requirements (e.g., tax records)

Your Rights Under GDPR

Right to Access

You have the right to request a copy of the personal data we hold about you. We will respond to your request within one month.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose.

Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by two additional months, and will inform you of any such extension.

Data Protection Officer

Due to the nature and scale of our data processing activities, we are not required to appoint a Data Protection Officer. However, all data protection queries can be directed to our general contact address.

International Transfers

We do not transfer personal data outside the United Kingdom. All data is stored and processed within the UK.

Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Information

We may update this GDPR information from time to time. The latest version will always be available on this page.