GDPR Compliance
Our commitment to data protection under the General Data Protection Regulation
Data Protection Principles
Bold-pulse is committed to compliance with the General Data Protection Regulation (GDPR) and UK data protection laws. We process personal data in accordance with the following principles:
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimization
- Accuracy
- Storage limitation
- Integrity and confidentiality
- Accountability
Legal Basis for Processing
We process personal data only when we have a lawful basis to do so. The legal bases we rely on include:
- Consent: When you have given clear consent for us to process your personal data for a specific purpose
- Contract: When processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract
- Legal obligation: When we must process your data to comply with the law
- Legitimate interests: When processing is necessary for our legitimate interests or those of a third party, provided your interests and rights do not override those interests
Your GDPR Rights
Under the GDPR, you have the following rights regarding your personal data:
Right to Be Informed
You have the right to clear, transparent information about how we use your personal data.
Right of Access
You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies beyond the first request.
Right to Rectification
You have the right to request that we correct information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we delete your personal data under certain conditions.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Right to Object
You have the right to object to our processing of your personal data under certain conditions.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. If your request is particularly complex or you have made multiple requests, we may extend this period by two further months, in which case we will inform you and explain the reason for the delay.
We may need to verify your identity before processing your request. This is a security measure to ensure that personal data is not disclosed to unauthorized persons.
Data Breach Notification
In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and, where feasible, within 72 hours of becoming aware of the breach.
International Data Transfers
We process and store personal data within the United Kingdom. If we need to transfer your personal data outside the UK or European Economic Area, we will ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
Data Protection Officer
For questions or concerns about our data protection practices or to exercise your GDPR rights, you may contact us at:
Email: [email protected]
Address: 47 Kensington High Street, London W8 5ED, United Kingdom
Right to Complain
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
Updates to This Statement
We may update this GDPR compliance statement from time to time to reflect changes in our practices or legal requirements. The current version will always be available on our website.