GDPR Compliance

vivid-aspire Ltd is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we ensure compliance and respect your data protection rights.

Data Controller Information

vivid-aspire Ltd acts as the data controller for personal information collected through this website and our services. As data controller, we determine the purposes and means of processing your personal data.

Contact details:
vivid-aspire Ltd
47 Greenfield Business Park
Bristol, BS1 4QR
United Kingdom
Email: [email protected]

Your Rights Under UK GDPR

As a data subject, you have the following rights regarding your personal data:

Right to Be Informed

You have the right to be informed about the collection and use of your personal data. We provide this information through our Privacy Policy and this GDPR page.

Right of Access

You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond within one month of receiving your request.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to have it corrected. We will respond to rectification requests within one month.

Right to Erasure

In certain circumstances, you can request the deletion of your personal data. This right is not absolute and applies where data is no longer necessary, consent is withdrawn, or processing is unlawful.

Right to Restrict Processing

You can request that we limit how we use your personal data while we address concerns about accuracy, lawfulness, or our legitimate interests.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used, machine-readable format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision Making

We do not currently use automated decision-making or profiling that produces legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. Include sufficient information to identify yourself and specify which right you wish to exercise.

We may need to verify your identity before processing your request. There is generally no charge for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

Lawful Basis for Processing

We process personal data only where we have a lawful basis to do so. The lawful bases we rely on include:

• Consent: You have given clear consent for specific processing activities
• Contract: Processing is necessary to perform a contract with you or take steps at your request before entering a contract
• Legitimate Interests: Processing is necessary for our legitimate interests where these do not override your fundamental rights
• Legal Obligation: Processing is necessary to comply with the law

Data Protection Principles

We adhere to the following principles when processing personal data:

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability

Data Breach Notification

In the event of a personal data breach that poses a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Where the breach is likely to result in high risk, we will also notify affected individuals without undue delay.

Complaints

If you are dissatisfied with how we handle your personal data, please contact us first so we can address your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Last updated: January 2024