Our commitment to protecting your data under the General Data Protection Regulation.
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on 25 May 2018. It applies to organisations operating within the European Union and the European Economic Area, as well as organisations outside these regions that offer goods or services to individuals within them.
Prairie-drift is committed to complying with GDPR requirements and ensuring that your personal data is processed lawfully, fairly, and transparently.
For the purposes of GDPR, Prairie-drift acts as the data controller for personal information collected through our website and during the provision of our consulting services. As data controller, we determine the purposes and means of processing personal data.
Data Controller Contact:
Prairie-drift
47 Bloomsbury Square
London WC1A 2RA
United Kingdom
Email: [email protected]
GDPR provides individuals with specific rights regarding their personal data. These include:
You have the right to be informed about how we collect and use your personal data. This is provided through this GDPR statement and our Privacy Policy.
You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond to your request within one month of receipt.
If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to rectification requests within one month.
Also known as the "right to be forgotten", you may request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or when you withdraw consent.
You have the right to request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.
Where we process personal data based on consent or for contract performance, you have the right to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller.
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes or processing based on legitimate interests.
You have rights concerning any decisions made about you solely through automated processing, including profiling, that have legal or similarly significant effects.
To exercise any of your GDPR rights, please contact us using the details provided above. We may need to verify your identity before processing your request. We will respond to most requests within one month, though this period may be extended by two additional months for complex requests, in which case we will inform you.
There is no fee for exercising your GDPR rights in most circumstances. However, we may charge a reasonable fee or refuse to comply if requests are manifestly unfounded or excessive.
Under GDPR, we must have a lawful basis to process your personal data. We rely on the following bases:
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing personal data. These measures include:
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to individuals' rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to affected individuals, we will also notify those individuals directly.
If you are dissatisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with a supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR statement periodically to reflect changes in our data processing practices or legal requirements. Any significant changes will be communicated through our website.