Your data protection rights under UK GDPR
River Nest is committed to protecting and respecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains your rights and how we ensure compliance with data protection legislation.
River Nest is the data controller for personal information collected through this website and our services. As data controller, we determine the purposes and means of processing your personal data.
Contact details:
River Nest
54 Dale Street
Liverpool, L2 5ST
United Kingdom
Email: [email protected]
Under the UK GDPR, you have the following rights regarding your personal data:
You have the right to be informed about the collection and use of your personal data. We provide this information through our Privacy Policy and this GDPR page.
You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond to valid requests within one month.
You have the right to have inaccurate personal data corrected or completed if it is incomplete. Please contact us if you believe the information we hold about you needs updating.
Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected.
You have the right to request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of your data.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have rights related to automated decision making and profiling. We do not currently use automated decision making that produces legal or similarly significant effects.
To exercise any of your data protection rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to your request within one month, although this period may be extended by up to two months for complex requests.
We process personal data under the following lawful bases:
We adhere to the data protection principles set out in UK GDPR:
We primarily process and store data within the United Kingdom. If any personal data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you are not satisfied with how we handle your personal data or your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Last updated: January 2024