GDPR Information

About UK GDPR

The UK General Data Protection Regulation (UK GDPR) provides individuals with rights regarding how organisations collect and process their personal data. Cerulean-atoll is committed to respecting these rights and being transparent about our data practices.

Data Controller

Cerulean-atoll acts as the data controller for personal information collected through this website and in the course of providing our services. This means we determine the purposes and means of processing your personal data.

Contact details:
Cerulean-atoll
42 Buchanan Gardens
Glasgow, G12 8QQ
[email protected]

Your Rights Under UK GDPR

Right to Be Informed

You have the right to know how your data is being collected and used. Our Privacy Policy and this GDPR page provide this information.

Right of Access

You can request a copy of all personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.

Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to have it corrected. Contact us with the correct information and we will update our records.

Right to Erasure

In certain circumstances, you can request that we delete your personal data. This right applies when:

• The data is no longer necessary for its original purpose
• You withdraw consent (where consent was the basis for processing)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restrict Processing

You can request that we limit how we use your data while concerns are being resolved, such as when accuracy is disputed or while an objection is being considered.

Right to Data Portability

Where processing is based on consent or contract, you can request your data in a structured, commonly used format for transfer to another organisation.

Right to Object

You can object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] or write to us at the address above. We may need to verify your identity before processing your request.

Complaints

If you are not satisfied with how we handle your data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk

Data Protection Principles

We adhere to the data protection principles set out in UK GDPR:

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability

Updates

This GDPR information page may be updated periodically. The current version will always be available on our website.