willow-spark

General Data Protection Regulation (GDPR)

willow-spark is committed to full compliance with the General Data Protection Regulation (GDPR) and UK data protection laws. This page outlines how we meet our obligations and protect your rights.

Data Controller

willow-spark acts as the data controller for personal information collected through this website and our services. We determine how and why your data is processed.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you provide information through contact forms or service requests
• Contract: To fulfill our contractual obligations when providing services
• Legitimate Interests: For business operations and improvement of our services
• Legal Obligation: When required to comply with legal requirements

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You can request access to the personal data we hold about you. We will provide a copy of this data in a commonly used electronic format.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes it was collected, or if you withdraw consent.

Right to Restrict Processing

You may request that we limit how we use your personal data in certain circumstances.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling in our services.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Data Protection Officer

For questions about our GDPR compliance or to exercise your rights, contact us at [email protected]

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

International Data Transfers

We do not transfer personal data outside the United Kingdom. All data is stored and processed within UK jurisdiction.

Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children.