GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

sage-birch is fully committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take your privacy seriously and have implemented measures to ensure your personal data is processed lawfully, fairly, and transparently.

Data Controller

sage-birch acts as the data controller for personal information collected through this website and in the course of providing our services. This means we determine the purposes and means of processing your personal data.

Contact details:

Email: [email protected]
Address: 47 Park Row, Leeds, LS1 5JA, United Kingdom

Lawful Basis for Processing

We only process personal data when we have a lawful basis to do so. The lawful bases we rely on include:

• Consent: You have given clear consent for us to process your personal data for a specific purpose, such as receiving communications about our services
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal Obligation: Processing is necessary for us to comply with the law
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual's personal data which overrides those legitimate interests

Your Rights Under UK GDPR

The UK GDPR provides you with specific rights regarding your personal data:

Right to Be Informed

You have the right to be informed about the collection and use of your personal data. This notice and our Privacy Policy fulfil this requirement.

Right of Access

You have the right to request a copy of the personal data we hold about you. We will respond to your request within one month.

Right to Rectification

You have the right to request that we correct any personal data you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

Right to Object

You have the right to object to our processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you. We do not currently engage in automated decision making.

How to Exercise Your Rights

To exercise any of your rights, please contact us:

Email: [email protected]
Address: 47 Park Row, Leeds, LS1 5JA, United Kingdom

We will respond to your request within one month. In complex cases or where we receive numerous requests, this period may be extended by a further two months, in which case we will notify you.

Data Protection Impact Assessments

Where our processing activities are likely to result in a high risk to the rights and freedoms of individuals, we carry out Data Protection Impact Assessments to identify and minimise risks.

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to the rights and freedoms of individuals, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where a breach is likely to result in a high risk, we will also notify affected individuals directly.

Complaints

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:

Website: ico.org.uk
Telephone: 0303 123 1113