GDPR Compliance

Last updated: September 2024

Our Commitment to Data Protection

sharpbison is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines your rights and our obligations under these regulations.

Data Controller

sharpbison acts as the data controller for personal information collected through our website and services. We are responsible for determining the purposes and means of processing your personal data.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you have given clear consent for us to process your personal data for a specific purpose
• Contract: When processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal obligation: When processing is necessary for us to comply with the law
• Legitimate interests: When processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests

Your Rights Under GDPR

Right to Be Informed

You have the right to be informed about the collection and use of your personal data. This GDPR notice and our Privacy Policy fulfil this requirement.

Right of Access

You have the right to access your personal data. You can request a copy of the information we hold about you at any time.

Right to Rectification

You have the right to have inaccurate personal data corrected or completed if it is incomplete.

Right to Erasure

You have the right to request the deletion of your personal data where there is no compelling reason for its continued processing. This right is not absolute and only applies in certain circumstances.

Right to Restrict Processing

You have the right to request the restriction or suppression of your personal data. This is not an absolute right and only applies in certain circumstances.

Right to Data Portability

You have the right to obtain and reuse your personal data for your own purposes across different services. This allows you to move, copy, or transfer personal data easily from one IT environment to another.

Right to Object

You have the right to object to processing based on legitimate interests, direct marketing, and processing for research and statistics.

Rights Related to Automated Decision Making

You have rights related to automated decision making and profiling. We do not currently carry out automated decision-making or profiling activities.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month. If your request is complex or you have made multiple requests, we may extend this period by a further two months, but we will inform you within the first month.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our retention periods are:

• Customer enquiries: 2 years from last contact
• Service records: 6 years after completion
• Website analytics: 26 months

International Transfers

We do not routinely transfer personal data outside the United Kingdom. If any transfer becomes necessary, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Complaints

If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Contact Us

For any questions about our GDPR compliance or to exercise your rights:

Email: [email protected]
Address: 47 Greenway Business Centre, Wavertree Road, Liverpool, L15 4NF, United Kingdom