GDPR Compliance

Last updated: August 2024

Our Commitment to GDPR

Urban Grooming Club is committed to protecting the personal data of our clients and website visitors in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Data Controller

Urban Grooming Club acts as the data controller for personal information collected through this website. This means we determine the purposes and means of processing personal data.

Contact details:
Email: [email protected]
Address: 47 Rivington Street, London EC2A 3QQ, United Kingdom

Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will respond to rectification requests within one month.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, including:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have contested.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

Lawful Bases for Processing

We only process personal data when we have a lawful basis to do so. The lawful bases we rely on include:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for a contract we have with you, such as booking appointments
• Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless overridden by your rights
• Legal Obligation: Where processing is necessary to comply with the law

Data Protection Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Regular testing and evaluation of security measures
• Staff training on data protection requirements
• Access controls to limit who can access personal data

International Transfers

We do not routinely transfer personal data outside the United Kingdom or European Economic Area. Should such transfers become necessary, we will ensure appropriate safeguards are in place.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where required, notify affected individuals without undue delay.

Complaints

If you have concerns about how we handle your personal data, please contact us first so we can address your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Exercising Your Rights

To exercise any of your rights, please contact us using the details provided above. We may need to verify your identity before processing your request. We will respond to all legitimate requests within one month.