Our Commitment to Data Protection
dapper-brook is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page provides detailed information about your rights and how we process your data.
Data Controller
For the purposes of data protection legislation, dapper-brook acts as the data controller for personal information collected through our services. We determine the purposes and means of processing your personal data.
Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Contract: Processing is necessary to fulfill our service agreement with you
- Consent: You have provided explicit consent for specific processing activities
- Legitimate Interests: Processing is necessary for our legitimate business operations, provided your rights are not overridden
- Legal Obligation: Processing is required to comply with legal and regulatory requirements
Your GDPR Rights
Right to Access
You have the right to request confirmation of whether we process your personal data and, if so, to receive a copy of that data along with information about how it is processed.
Right to Rectification
If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
Right to Erasure
Under certain circumstances, you have the right to request deletion of your personal data, including when:
- The data is no longer necessary for the purposes it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restriction of Processing
You may request that we restrict processing of your personal data when:
- You contest the accuracy of the data
- Processing is unlawful but you prefer restriction over erasure
- We no longer need the data but you require it for legal claims
- You have objected to processing pending verification of our legitimate grounds
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with data protection law. Contact details: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Tel: 0303 123 1113.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended by two additional months for complex requests. We will inform you of any extension within the first month.
We may request additional information to verify your identity before processing requests concerning personal data.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the ICO within 72 hours of becoming aware of the breach, where required by law.
International Data Transfers
We primarily process personal data within the United Kingdom. If we transfer data outside the UK or European Economic Area, we ensure appropriate safeguards are in place in accordance with data protection law.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Data Protection Officer
For questions specifically related to data protection and GDPR compliance, you may contact our designated data protection contact at [email protected].