Your data protection rights under the General Data Protection Regulation.
aurora-loft is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about your rights and how we fulfil our obligations.
aurora-loft acts as the data controller for the personal information we collect through this website and our services. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection legislation.
We process personal data under one or more of the following lawful bases:
The UK GDPR provides you with the following rights:
You have the right to be informed about the collection and use of your personal data. We fulfil this obligation through this notice and our Privacy Policy.
You have the right to request a copy of the personal data we hold about you. We will respond to valid requests within one month.
You have the right to request correction of inaccurate personal data or completion of incomplete data.
You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose it was collected, where you withdraw consent, or where the data has been unlawfully processed.
You have the right to request restriction of processing in certain circumstances, such as while we verify the accuracy of challenged data or assess an objection to processing.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on legitimate interests, direct marketing, and processing for research or statistical purposes.
You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not currently engage in such automated decision-making.
To exercise any of these rights, please submit a written request to us via email or post. We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests.
For all data protection enquiries and to exercise your rights, please contact us at:
Email: [email protected]
Address: 47 Meridian Business Park, Leicester, LE19 1WZ, United Kingdom
If you are not satisfied with how we handle your data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with data protection legislation.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware. Where there is a high risk to you, we will also notify you directly without undue delay.
Last updated: January 2024