GDPR Compliance

deft-lagoon is committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we ensure compliance and uphold your data protection rights.

Our Role as Data Controller

When you submit information through our website or engage with our services, deft-lagoon acts as the data controller. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that processing complies with applicable data protection laws.

Principles of Data Processing

We adhere to the following principles when processing personal data:

• Lawfulness, fairness, and transparency: We process data lawfully and inform you about how your data is used
• Purpose limitation: Data is collected for specified, explicit, and legitimate purposes
• Data minimisation: We collect only the data necessary for the stated purposes
• Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date
• Storage limitation: Data is retained only for as long as necessary
• Integrity and confidentiality: Appropriate security measures protect personal data
• Accountability: We demonstrate compliance with these principles

Your Rights Under UK GDPR

As a data subject, you have the following rights regarding your personal data:

Right of Access

You may request confirmation of whether we process your personal data and, if so, obtain a copy of that data along with information about how it is processed.

Right to Rectification

You may request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure

In certain circumstances, you may request deletion of your personal data. This right applies when data is no longer necessary for its original purpose, you withdraw consent, or processing was unlawful.

Right to Restrict Processing

You may request that we limit how we use your data in certain situations, such as while we verify accuracy following a dispute.

Right to Data Portability

Where processing is based on consent or contract and is carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.

Right to Object

You may object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects, subject to certain exceptions.

Exercising Your Rights

To exercise any of these rights, please submit a request to:

Email: [email protected]

We will respond to valid requests within one month. In complex cases or where multiple requests are made, this period may be extended by two months with prior notification.

We may request verification of your identity before processing your request to protect your data from unauthorised access.

Data Protection Officer

While we have not appointed a formal Data Protection Officer, our compliance team oversees data protection matters. For queries regarding our data protection practices, please contact us at the address above.

International Data Transfers

Where personal data is transferred outside the UK, we ensure adequate protection through approved mechanisms such as Standard Contractual Clauses or transfers to countries deemed to have adequate protection.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: ico.org.uk

Updates to This Information

We review our data protection practices regularly and may update this information accordingly. Material changes will be communicated through our website.