GDPR Compliance
Our commitment to protecting your personal data under the General Data Protection Regulation.
Last updated: January 2024
Our Commitment to Data Protection
Lumen-valley is committed to ensuring that your personal data is protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This page outlines how we comply with data protection requirements and explains your rights regarding personal data.
Data Controller
For the purposes of data protection legislation, Lumen-valley is the data controller for personal information collected through this website and in the course of providing our consulting services.
Contact details:
Lumen-valley
47 Spinningfields Lane
Manchester, M3 4LQ
United Kingdom
Email: [email protected]
Lawful Basis for Processing
We process personal data only where we have a lawful basis to do so. The lawful bases we rely upon include:
Consent
When you submit an enquiry through our website or sign up to receive communications from us, you consent to the processing of your personal data for those specific purposes. You may withdraw consent at any time.
Contractual Necessity
When we enter into a consulting engagement with you or your organisation, we process personal data as necessary to perform the contract and deliver our services.
Legitimate Interests
We may process personal data where it is necessary for our legitimate business interests, provided those interests do not override your fundamental rights. This includes:
- Improving our website and services
- Understanding how our services are used
- Protecting our business and legal rights
Legal Obligation
We may process personal data where necessary to comply with legal obligations, such as tax and accounting requirements.
Your Rights Under GDPR
As a data subject, you have the following rights:
Right of Access
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR).
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
In certain circumstances, you have the right to request that we delete your personal data. This is also known as the "right to be forgotten."
Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object
You have the right to object to processing of your personal data where we are relying on legitimate interests as the lawful basis.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
Exercising Your Rights
To exercise any of your rights, please contact us using the details provided above. We will respond to your request within one month of receiving it. In complex cases, this period may be extended by a further two months, in which case we will inform you of the extension and the reasons for it.
There is no fee for exercising your rights, although we may charge a reasonable fee for manifestly unfounded or excessive requests.
Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit
- Regular security assessments
- Access controls and authentication
- Staff training on data protection
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our retention periods are based on business needs and legal requirements. When personal data is no longer required, it is securely deleted or anonymised.
International Transfers
We primarily process personal data within the United Kingdom. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with data protection requirements.
Complaints
If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this page from time to time to reflect changes in our practices or legal requirements. The date of the last update is shown at the top of this page.