GDPR Compliance
Our commitment to protecting your personal data under UK GDPR
Last updated: January 2024
About UK GDPR
The UK General Data Protection Regulation (UK GDPR), together with the Data Protection Act 2018, sets out the framework for data protection law in the United Kingdom. This page explains how Disinfrate complies with these requirements and upholds your data protection rights.
Data Controller
Disinfrate acts as the data controller for personal information collected through this website and in the course of providing our gardening and landscaping services. This means we determine the purposes and means of processing your personal data.
Contact details:
Disinfrate
47 Greenfield Lane
Leeds, LS8 3PQ
United Kingdom
Email: [email protected]
Lawful Basis for Processing
We only process personal data when we have a lawful basis to do so. The lawful bases we rely on are:
Contract Performance
We process data necessary to fulfil our contractual obligations to you, such as:
- Scheduling service appointments
- Preparing quotes and invoices
- Communicating about ongoing work
Legitimate Interests
We may process data for our legitimate business interests, provided these do not override your fundamental rights. Examples include:
- Improving our services based on feedback
- Maintaining business records
- Protecting against fraud
Consent
Where required, we obtain your explicit consent before processing. You may withdraw consent at any time by contacting us.
Legal Obligation
We process data as necessary to comply with legal requirements, such as tax and accounting regulations.
Your Rights Under UK GDPR
As a data subject, you have the following rights:
Right to Be Informed
You have the right to know how your data is being collected and used. This notice and our Privacy Policy provide this information.
Right of Access
You may request a copy of the personal data we hold about you. We will respond within one month of receiving your request.
Right to Rectification
If your personal data is inaccurate or incomplete, you have the right to have it corrected.
Right to Erasure
Also known as the "right to be forgotten", you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
Right to Restrict Processing
You may request that we limit how we use your data while concerns are being investigated.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format and to have it transferred to another controller where technically feasible.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
Data Security Measures
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Secure storage of physical documents
- Password protection and access controls for digital systems
- Staff training on data protection
- Regular review of data processing activities
Data Breach Procedures
In the event of a personal data breach, we will:
- Assess the risk to individuals
- Notify the Information Commissioner's Office within 72 hours if required
- Communicate with affected individuals where the breach poses a high risk to their rights
- Document the breach and our response
International Transfers
We do not routinely transfer personal data outside the United Kingdom. If such transfers become necessary, we will ensure appropriate safeguards are in place.
Exercising Your Rights
To exercise any of your data protection rights, please contact us at:
Email: [email protected]
We will respond to your request within one month. In complex cases, this period may be extended by two further months, and we will inform you of any such extension.
Complaints
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: ico.org.uk