Our Commitment to Data Protection

Cerulean-spring is fully committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of personal data seriously and have implemented measures to ensure lawful, fair, and transparent processing of any personal information we collect.

Data Controller

Cerulean-spring acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.

Your Rights Under GDPR

The GDPR provides you with specific rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You may request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal data under certain conditions.

Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to processing of your personal data where we are relying on legitimate interests as our legal basis.

How We Protect Your Data

We employ appropriate technical and organisational measures to protect personal data, including:

  • Secure data storage with access controls
  • Regular security assessments
  • Staff training on data protection principles
  • Data minimisation practices

Data Processing Activities

We process personal data for legitimate business purposes including:

  • Responding to enquiries about our consulting services
  • Providing requested services to clients
  • Improving our website and user experience
  • Complying with legal and regulatory requirements

International Data Transfers

We primarily store and process data within the United Kingdom. If any data transfer outside the UK becomes necessary, we ensure appropriate safeguards are in place in accordance with data protection requirements.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within one month. There is no fee for most requests, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

Complaints

If you are not satisfied with how we handle your data or your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.