GDPR Compliance
Last updated: October 2024
Our Commitment to Data Protection
Scarlet-Ocean is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we ensure compliance and how you can exercise your data protection rights.
Data Controller
Scarlet-Ocean acts as the data controller for personal information collected through this website and our services. We determine the purposes and means of processing personal data.
Contact details:
Address: 47 Berkeley Square, Mayfair, London W1J 5AU
Email: [email protected]
Lawful Basis for Processing
We process personal data under the following lawful bases as defined by UK GDPR Article 6:
- Consent (Article 6(1)(a)): Where you have given explicit consent for processing
- Contract (Article 6(1)(b)): Where processing is necessary for contract performance
- Legitimate Interest (Article 6(1)(f)): Where we have a legitimate business interest that does not override your rights
Your Data Subject Rights
Under UK GDPR, you have the following rights:
Right of Access (Article 15)
You have the right to obtain confirmation that your data is being processed and to access that personal data, along with supplementary information about the processing.
Right to Rectification (Article 16)
You have the right to have inaccurate personal data rectified and incomplete data completed.
Right to Erasure (Article 17)
You have the right to request deletion of your personal data where there is no compelling reason for continued processing.
Right to Restrict Processing (Article 18)
You have the right to request the restriction of processing in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Article 21)
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making (Article 22)
You have the right not to be subject to a decision based solely on automated processing which produces legal effects or significantly affects you.
Exercising Your Rights
To exercise any of your data protection rights, please contact us using the details provided above. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by up to two additional months, in which case we will inform you.
We may ask you to verify your identity before processing your request. We will not charge a fee for processing most requests, except where requests are manifestly unfounded or excessive.
Data Protection Officer
For data protection enquiries, please contact us at [email protected] with "Data Protection" in the subject line.
Data Breach Procedures
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
International Data Transfers
Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements. This may include standard contractual clauses approved by the Information Commissioner's Office.
Complaints
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Helpline: 0303 123 1113
We encourage you to contact us first so we can attempt to resolve your concerns.
Updates to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.