Your data protection rights under UK GDPR
At Gleam Spot, we are committed to ensuring that your personal data is protected and handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about our compliance measures and your rights.
Gleam Spot is the data controller responsible for your personal data. Our contact details are:
Gleam Spot
47 Meadow Lane
Bristol, BS4 2TP
Email: [email protected]
The UK GDPR provides you with specific rights regarding your personal data. We are committed to honouring these rights:
You have the right to know how your personal data is being collected and used. Our Privacy Policy and this GDPR page provide this information transparently.
You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.
If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will make corrections promptly upon verification.
Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, including:
You can request that we limit how we use your personal data while we verify accuracy or investigate concerns.
You can request your personal data in a structured, commonly used format and have it transferred to another organisation where technically feasible.
You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.
You have rights regarding automated decision-making and profiling. We do not currently use automated decision-making that has legal or similarly significant effects.
We only process personal data when we have a lawful basis to do so. The bases we rely on include:
We collect only the data necessary for providing our services:
We implement appropriate technical and organisational measures to protect your data:
We retain personal data only for as long as necessary:
Your data is primarily stored within the UK. Where data is transferred internationally (for example, through cloud service providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
We work with carefully selected third-party processors who comply with UK GDPR requirements. These include:
All processors are bound by data processing agreements ensuring your data is protected.
In the unlikely event of a personal data breach, we have procedures in place to:
To exercise any of your data protection rights, please contact us:
Please provide sufficient information to verify your identity and specify which right you wish to exercise. We will respond within one month of receiving your request.
If you are unhappy with how we have handled your data, you have the right to complain to the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.
This GDPR information page may be updated periodically to reflect changes in our practices or legal requirements. We recommend reviewing it regularly.