troneorcia is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we protect your rights and process your personal data in accordance with these regulations.
Data Controller
troneorcia acts as the data controller for personal information collected through this website and our services. We determine the purposes and means of processing your personal data.
Contact details:
troneorcia
42 George Street
Edinburgh EH2 2LR
United Kingdom
Email: [email protected]
Your Rights Under GDPR
Under the UK GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will respond to your request within one month.
Right to Rectification
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.
Right to Erasure
In certain circumstances, you have the right to request deletion of your personal data. This applies when the data is no longer necessary for its original purpose, you withdraw consent, or you object to processing.
Right to Restrict Processing
You may request that we limit how we use your data in certain situations, such as when you contest its accuracy or object to processing.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used format.
Right to Object
You have the right to object to processing based on legitimate interests, including profiling and direct marketing.
Rights Related to Automated Decision-Making
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Consent: When you explicitly agree to our processing, such as when submitting enquiry forms
- Contract: When processing is necessary to fulfil our obligations to you
- Legitimate Interests: When we have a valid business reason that does not override your rights
- Legal Obligation: When we must comply with legal requirements
Data Protection Measures
We implement appropriate technical and organisational measures to ensure data security, including:
- Secure transmission of data using encryption where appropriate
- Access controls limiting who can view personal data
- Regular review of data handling practices
- Staff training on data protection responsibilities
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods are determined based on legal requirements, contractual obligations, and legitimate business needs.
International Transfers
We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Exercising Your Rights
To exercise any of your rights, please contact us using the details above. We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests.
Complaints
If you are not satisfied with how we handle your data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Last updated: August 2024