GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

brisk-heath is committed to protecting the privacy and security of your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we comply with these regulations and explains your rights as a data subject.

Data Controller

brisk-heath acts as the data controller for personal information collected through our website and services. As data controller, we determine the purposes and means of processing your personal data.

Contact details:
brisk-heath
14 Kensington High Street
London W8 4PT
United Kingdom
Email: [email protected]

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation.

Your Rights Under GDPR

The UK GDPR provides you with specific rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of your request.

Right to Rectification

You have the right to request correction of any inaccurate personal data we hold about you. We will respond to rectification requests within one month.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose for which it was collected.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Exercising Your Rights

To exercise any of your rights, please contact us using the details provided above. We will respond to your request within one month. In complex cases, we may extend this period by a further two months, but we will inform you if this is necessary.

We will not charge a fee for handling your request unless it is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee or refuse to act on the request.

Data Protection Officer

For any questions regarding our GDPR compliance or to exercise your data protection rights, please contact us at [email protected].

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

International Transfers

We do not routinely transfer personal data outside the UK. If we do need to transfer your data internationally, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.