GDPR Information

Our Commitment to Data Protection

snug-moor is committed to protecting the personal data of our website visitors and clients in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle your personal data and your rights under data protection law.

Data Controller

snug-moor acts as the data controller for personal data collected through this website. This means we determine the purposes and means of processing your personal data.

Contact details:
snug-moor
47 Broadcast Lane
London, W1D 4SL
United Kingdom
Email: [email protected]

Personal Data We Process

We process the following categories of personal data:

• Identity data: name, job title, company name
• Contact data: email address
• Technical data: IP address, browser type, device information
• Usage data: information about how you use our website
• Communication data: your enquiries and our responses

Lawful Basis for Processing

We process your personal data on the following lawful bases:

Consent

When you submit an enquiry form, you consent to us processing your personal data to respond to your enquiry and provide information about our services.

Legitimate Interests

We may process your data where it is necessary for our legitimate interests, such as improving our website and services, provided these interests do not override your fundamental rights and freedoms.

Legal Obligation

We may process your data where we are required to comply with a legal obligation.

Your Rights Under UK GDPR

As a data subject, you have the following rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.

Right to Erasure

In certain circumstances, you have the right to request that we delete your personal data. This right is not absolute and may be subject to legal exceptions.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to the processing of your personal data where we are relying on legitimate interests as our lawful basis. We will cease processing unless we can demonstrate compelling legitimate grounds for the processing.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects. We do not currently use automated decision-making in processing your data.

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided above. We may need to verify your identity before processing your request. We will respond to all legitimate requests within one month. In some cases, we may extend this period by up to two months if your request is complex or if we have received a high volume of requests.

Data Security

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit using SSL/TLS
• Regular testing and evaluation of security measures
• Access controls limiting who can access personal data
• Staff training on data protection requirements

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our standard retention periods are:

• Enquiry data: 3 years from last contact
• Website analytics data: 26 months
• Cookie consent records: 12 months

International Transfers

Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office or transfers to countries with adequate data protection laws.

Complaints

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

Changes to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.