Our commitment to protecting your personal data under UK GDPR
Last updated: January 2024
jolly-stone is committed to ensuring the security and protection of the personal information that we process, and to providing a compliant and consistent approach to data protection. We have always had a robust and effective data protection programme in place which complies with existing law and abides by the data protection principles.
The UK General Data Protection Regulation (UK GDPR), alongside the Data Protection Act 2018, is the primary legislation governing data protection in the United Kingdom. It regulates how personal data is collected, stored, processed, and shared by organisations. The UK GDPR grants individuals specific rights regarding their personal data and places obligations on organisations that handle such data.
jolly-stone acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing personal data.
Our contact details are:
jolly-stone
47 Queen Square
Bristol, BS1 4LH
United Kingdom
Email: [email protected]
Under UK GDPR, you have the following rights regarding your personal data:
You have the right to be informed about the collection and use of your personal data. We provide this information through our Privacy Policy and this GDPR page.
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.
You have the right to have inaccurate personal data corrected or completed if it is incomplete. Contact us if you believe any information we hold about you is incorrect.
Also known as the "right to be forgotten", you can request deletion of your personal data where there is no compelling reason for its continued processing. This right is not absolute and only applies in certain circumstances.
You have the right to request restriction of the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format. You may also request that we transfer this data to another organisation.
You have the right to object to processing based on legitimate interests, direct marketing, and processing for research or statistical purposes.
You have rights related to automated decision making, including profiling. jolly-stone does not currently use automated decision-making processes that significantly affect individuals.
To exercise any of your rights, please contact us using the details provided above. We will respond to your request within one month. If your request is complex or we receive a large number of requests, we may extend this period by a further two months, but we will inform you of any such extension within one month of receipt of your request.
We may need to verify your identity before processing your request. There is no fee for exercising your rights, although we may charge a reasonable fee or refuse to act on a request if it is manifestly unfounded or excessive.
We adhere to the principles relating to the processing of personal data as set out in UK GDPR:
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those employees and third parties who have a business need to know.
We have procedures in place to deal with any suspected personal data breach and will notify you and the Information Commissioner's Office (ICO) of a breach where we are legally required to do so.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
We may update this GDPR information page from time to time. We encourage you to periodically review this page for the latest information on our data protection practices.