Our commitment to data protection and your rights
Ink-root Ltd is fully committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognise the importance of protecting personal data and ensuring that individuals can exercise their rights over their information.
This page provides information about how we implement GDPR requirements and how you can exercise your rights as a data subject.
Ink-root Ltd acts as the data controller for the personal information we collect and process. This means we determine the purposes and means of processing your personal data.
Contact details:
Ink-root Ltd
47 Blackfriars Road
London SE1 8NZ
United Kingdom
Email: [email protected]
We only process personal data when we have a valid lawful basis to do so. The lawful bases we rely on include:
Where you have freely given clear consent for us to process your personal data for a specific purpose. You have the right to withdraw consent at any time.
Where processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract.
Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.
Where processing is necessary for compliance with a legal obligation to which we are subject.
The UK GDPR provides you with the following rights regarding your personal data:
You have the right to be informed about the collection and use of your personal data. We provide this information through our Privacy Policy and this GDPR page.
You have the right to request access to your personal data and supplementary information about how we process it. This is commonly known as a "subject access request".
You have the right to have inaccurate personal data corrected and incomplete data completed.
You have the right to have your personal data erased in certain circumstances, including where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent.
You have the right to request the restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to processing based on legitimate interests or the performance of a task in the public interest, direct marketing, and processing for scientific or historical research purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of your rights under the UK GDPR, please contact us at [email protected] with your request. We will respond to your request within one month of receiving it. In some cases, we may need to extend this period by up to two months, depending on the complexity of your request, but we will inform you if this is the case.
We may need to verify your identity before processing your request to ensure the security of your personal data.
Where our processing activities are likely to result in a high risk to your rights and freedoms, we conduct Data Protection Impact Assessments (DPIAs) to identify and minimise data protection risks.
If we transfer personal data outside the UK, we ensure that appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the Information Commissioner's Office or transfers to countries with adequate data protection laws.
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
The supervisory authority for data protection in the UK is the Information Commissioner's Office (ICO). You have the right to lodge a complaint with the ICO if you believe that your data protection rights have been violated.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically for the latest information on our data protection practices.