GDPR Compliance

Our Commitment to GDPR

prairie-pulse is committed to complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page provides information about how we fulfil our obligations under these regulations.

Data Controller

prairie-pulse acts as the data controller for personal information collected through this website. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection laws.

Contact details for data protection enquiries:

prairie-pulse
47 Clerkenwell Road
London, EC1M 5RS
United Kingdom
Email: [email protected]

Your Rights Under GDPR

The GDPR provides individuals with specific rights regarding their personal data. We are committed to upholding these rights:

Right to be Informed

You have the right to be informed about how we collect and use your personal data. Our Privacy Policy and this page provide this information.

Right of Access

You have the right to request access to your personal data. We will provide a copy of your data within one month of receiving a valid request.

Right to Rectification

You have the right to have inaccurate personal data corrected or completed if it is incomplete.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you.

Exercising Your Rights

To exercise any of your rights, please submit a request to [email protected]. We may need to verify your identity before processing your request. We will respond within one month, though this period may be extended by two months for complex requests.

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so. The bases we rely on include:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract
• Legal obligation: Where processing is necessary for us to comply with the law
• Legitimate interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests

Data Minimisation

We collect only the personal data that is necessary for the specific purposes identified. We do not collect excessive data and regularly review our data collection practices.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Regular testing and evaluation of security measures
• Staff training on data protection
• Access controls to limit who can access personal data

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

International Transfers

Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated date.