GDPR Compliance

Last updated: October 2024

Our Commitment to GDPR

owl-soar is committed to protecting the personal data of all individuals who interact with our services. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller Information

owl-soar acts as the data controller for personal information collected through our website and services. Our contact details are:

owl-soar
47 Castle Street
Liverpool, L2 9SH
United Kingdom

Email: [email protected]

Principles of Data Processing

We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency: We process data lawfully and in a transparent manner
• Purpose limitation: Data is collected for specified, explicit purposes
• Data minimisation: We collect only data that is necessary
• Accuracy: Personal data is kept accurate and up to date
• Storage limitation: Data is retained only as long as necessary
• Integrity and confidentiality: Appropriate security measures protect personal data
• Accountability: We demonstrate compliance with these principles

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You may request a copy of the personal data we hold about you. We will respond to such requests within one month, subject to verification of your identity.

Right to Rectification

You may request that we correct any inaccurate or incomplete personal data. We aim to process rectification requests promptly.

Right to Erasure

In certain circumstances, you may request deletion of your personal data. This right applies when:

• The data is no longer necessary for its original purpose
• You withdraw consent (where consent was the legal basis)
• You object to processing and no overriding legitimate grounds exist
• The data has been unlawfully processed
• Deletion is required for legal compliance

Right to Restriction

You may request that we limit the processing of your personal data in certain situations, such as while we verify the accuracy of contested data.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

We do not engage in automated decision-making that produces legal or similarly significant effects on individuals without human involvement.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. We may request verification of your identity before processing your request.

We aim to respond to all legitimate requests within one month. Occasionally, this period may be extended by two additional months for complex or multiple requests, in which case we will inform you within the initial month.

Data Security Measures

We implement appropriate technical and organisational measures to ensure security of personal data, including:

• Encryption of data in transit using SSL/TLS protocols
• Access controls limiting data access to authorised personnel
• Regular security assessments and updates
• Staff training on data protection responsibilities
• Secure disposal of data when no longer required

International Data Transfers

We primarily process data within the United Kingdom. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Data Breach Notification

In the event of a personal data breach likely to result in risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware. Where the breach is likely to result in high risk, affected individuals will be notified directly.

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom

Website: ico.org.uk

We encourage you to contact us first so we may address your concerns directly.

Updates to This Notice

This GDPR compliance notice may be updated periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.