Last updated: January 2024
Our Commitment to GDPR
Harbor Verse is committed to complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We take our responsibilities regarding your personal data seriously and have implemented measures to ensure your rights are protected.
Data Controller
Harbor Verse acts as the data controller for personal information collected through our website and business operations. This means we determine the purposes and means of processing your personal data.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Contract: Processing necessary to fulfil our contract with you when you purchase our products
- Consent: Where you have given clear consent for us to process your personal data for specific purposes
- Legitimate interests: Processing necessary for our legitimate business interests, provided these do not override your rights
- Legal obligation: Processing necessary to comply with legal requirements
Your Rights Under GDPR
Under the GDPR, you have the following rights:
Right of Access
You have the right to request a copy of the personal information we hold about you. We will respond to such requests within one month.
Right to Rectification
You have the right to request that we correct any inaccurate personal information we hold about you.
Right to Erasure
You have the right to request that we delete your personal information in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal information in certain circumstances.
Right to Data Portability
You have the right to receive your personal information in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to processing of your personal information in certain circumstances, including for direct marketing purposes.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
Exercising Your Rights
To exercise any of these rights, please contact us using the details below. We may need to verify your identity before processing your request. We aim to respond to all legitimate requests within one month, though this may be extended by up to two months for complex requests.
Data Protection Officer
While we are not required to appoint a Data Protection Officer, we take data protection seriously. For any data protection queries, please contact us at [email protected].
International Transfers
We do not routinely transfer personal data outside the United Kingdom or the European Economic Area. If any transfer becomes necessary, we will ensure appropriate safeguards are in place.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights, we will also notify you directly.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Contact Us
For any questions regarding our GDPR compliance or to exercise your rights:
Harbor Verse
27 Meadow Lane
Richmond, Surrey TW9 4HP
United Kingdom
Email: [email protected]