GDPR Compliance

Last updated: October 2024

About GDPR and UK Data Protection

The General Data Protection Regulation (GDPR) and the UK GDPR set out principles for the processing of personal data. At Lush-moon, we are committed to complying with these regulations and ensuring your personal data is handled responsibly and transparently.

Data Controller

Lush-moon is the data controller responsible for your personal data collected through this website and our services. Our contact details are:

Lush-moon
47 Greenhill Avenue
Sheffield, S8 7TG
United Kingdom

Email: [email protected]

Principles We Follow

We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency: We process data lawfully, fairly, and in a transparent manner
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes
• Data minimisation: We only collect data that is adequate, relevant, and limited to what is necessary
• Accuracy: We keep personal data accurate and up to date
• Storage limitation: We retain data only for as long as necessary
• Integrity and confidentiality: We process data securely with appropriate measures
• Accountability: We take responsibility for compliance with these principles

Your Rights Under GDPR

Under data protection legislation, you have the following rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a subject access request.

Right to Rectification

You have the right to request that we correct any personal data that is inaccurate or incomplete.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.

Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you. We do not currently use automated decision-making in our processes.

How to Exercise Your Rights

To exercise any of your rights, please contact us using the details above. We will respond to your request within one month of receiving it. In some cases, we may need to verify your identity before processing your request.

There is no fee for making a request, although we may charge a reasonable fee for repetitive, unfounded, or excessive requests.

Data Transfers

We do not routinely transfer personal data outside the United Kingdom. If such transfers become necessary, we will ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.

Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where required, inform affected individuals without undue delay.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: ico.org.uk

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.