How we comply with the General Data Protection Regulation and UK data protection law.
Last updated: January 2024
emerald-wander is committed to protecting your personal data and respecting your privacy. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we fulfil our obligations and your rights under these regulations.
emerald-wander is the data controller for the personal information we collect through our website and services.
Contact details:
emerald-wander
47 Cathedral Road
Canton, Cardiff CF11 9HB
Email: [email protected]
We process personal data under the following lawful bases:
Where you have given clear consent for us to process your personal data for a specific purpose. This includes:
You can withdraw consent at any time by contacting us.
Where processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract. This includes:
Where processing is necessary to comply with a legal obligation. This includes:
Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes:
Under UK GDPR, you have the following rights regarding your personal data:
You have the right to be informed about how we collect and use your personal data. This notice, along with our Privacy Policy, fulfils this requirement.
You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
You have the right to have inaccurate personal data corrected. If you believe any information we hold is incorrect, please contact us and we will update it promptly.
You have the right to request deletion of your personal data in certain circumstances, including:
Note: We may need to retain certain data for legal or legitimate business purposes.
You have the right to request that we limit how we use your data in certain circumstances, such as when you contest its accuracy or object to processing.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of your rights, please contact us at [email protected]. We will:
If we cannot comply with your request, we will explain why.
We implement appropriate technical and organisational measures to protect personal data, including:
We retain personal data only as long as necessary for the purposes for which it was collected:
We primarily store and process data within the UK. If data is transferred outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR.
Our services involve children aged 7-17. We collect children's information only from parents or guardians. We apply enhanced care to children's data and obtain parental consent where required.
In the event of a personal data breach that is likely to result in a risk to individuals' rights and freedoms, we will:
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
We would appreciate the opportunity to address your concerns before you approach the ICO. Please contact us first at [email protected].
We may update this GDPR notice from time to time. Any changes will be posted on this page with an updated revision date.