Our commitment to protecting your data under the General Data Protection Regulation.
Last updated: November 2024
True-hawk is committed to complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page explains how we meet our obligations and protect your rights as a data subject.
True-hawk acts as the data controller for personal information collected through our website and in the course of providing our services. As data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection legislation.
Contact details:
True-hawk
Thornbury House, 14 Cathedral Close
Salisbury, Wiltshire SP1 2EF
United Kingdom
Email: [email protected]
We only process personal data when we have a valid lawful basis to do so. The lawful bases we rely on include:
Where you have given clear, informed consent for us to process your personal data for specific purposes, such as receiving marketing communications or submitting enquiry forms.
Where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract, such as providing our conservation consultancy services.
Where processing is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. This includes maintaining our business records, improving our services, and ensuring website security.
Where we need to process your data to comply with a legal requirement, such as maintaining financial records or responding to regulatory requests.
As a data subject, you have the following rights regarding your personal data:
You have the right to be told how your personal data will be used. This notice and our Privacy Policy fulfil this obligation.
You have the right to request a copy of the personal data we hold about you and information about how we process it.
You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.
Also known as the right to be forgotten, you can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
You can request that we limit the way we use your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have rights in relation to automated decision-making and profiling. We do not currently use automated decision-making processes that have legal or similarly significant effects.
To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month of receiving it. In complex cases, we may extend this period by a further two months, but we will inform you of any such extension within the initial one-month period.
We will not charge a fee to handle your request unless it is manifestly unfounded or excessive. If we refuse your request, we will explain why and inform you of your right to complain to the supervisory authority.
We adhere to the core principles of GDPR in all our data processing activities:
We primarily store and process personal data within the United Kingdom and European Economic Area. If we need to transfer data outside these regions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the relevant authorities.
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk
We may update this GDPR notice periodically to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised date.