GDPR Compliance

Our Commitment to GDPR

ocean-lemur is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws. This page outlines how we comply with these regulations and your rights as a data subject.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes related to our housing consultation services
• Contract: Processing is necessary for a contract we have with you, or to take steps at your request before entering into a contract
• Legal obligation: Processing is necessary to comply with the law
• Legitimate interests: Processing is necessary for our legitimate interests or those of a third party, provided your interests and rights do not override those interests

Data Controller Information

ocean-lemur acts as the data controller for personal information collected through our services. You can contact us regarding data protection matters at [email protected].

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee for multiple copies or manifestly unfounded requests.

Right to Rectification

You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.

Right to Erasure

You have the right to request deletion of your personal data under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict processing of your personal data under certain conditions.

Right to Object

You have the right to object to our processing of your personal data under certain conditions, particularly when processing is based on legitimate interests.

Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you under certain conditions.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.

International Data Transfers

Your personal data is primarily processed and stored within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place as required by GDPR.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with the following information:

• Your full name and contact details
• Description of the right you wish to exercise
• Any relevant details to help us locate your information

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of any extension.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.

ICO contact information:
Website: ico.org.uk
Phone: 0303 123 1113