Last updated: August 2024
Prime-Crag is committed to ensuring the security and protection of the personal information that we process. We have implemented appropriate technical, physical, and organisational measures to protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Prime-Crag acts as a Data Controller for the personal information we collect and process. As the Data Controller, we are responsible for determining the purposes and means of processing personal data.
Contact details:
Prime-Crag
47 Fleet Street
London EC4Y 1BJ
Email: [email protected]
We process personal data under the following lawful bases:
Under the UK GDPR, you have the following rights regarding your personal data:
Right to be Informed: You have the right to be informed about the collection and use of your personal data.
Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
Right to Rectification: You have the right to have inaccurate personal data corrected or completed if it is incomplete.
Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
Right to Restrict Processing: You have the right to request that we limit the way we use your personal data in certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transferred to another controller where technically feasible.
Right to Object: You have the right to object to certain types of processing, including processing based on legitimate interests and processing for direct marketing purposes.
Rights Related to Automated Decision Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive a high volume of requests, we may extend this period by a further two months, but we will inform you of any extension and the reasons for it.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance notice from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on our website.