GDPR Compliance Information
Our commitment to protecting your data rights under the General Data Protection Regulation
Our Commitment to GDPR
We are committed to complying with the General Data Protection Regulation (GDPR) and UK data protection legislation. This page explains how we uphold your data protection rights and fulfill our obligations as a data controller.
Data Controller Information
The data controller responsible for your personal information is:
vivid-harbor.com
15 Pemberton Row
Bloomsbury, London WC1A 2DX
United Kingdom
Email: [email protected]
Lawful Basis for Processing
We process your personal data only when we have a lawful basis, including:
Consent
When you provide explicit consent, such as submitting inquiry forms or accepting cookies, we process your data based on that consent. You may withdraw consent at any time.
Contract Performance
When you engage our services, we process personal data necessary to deliver those services and fulfill contractual obligations.
Legitimate Interests
We may process data based on legitimate business interests, such as improving services, preventing fraud, and maintaining website security, provided these interests do not override your rights and freedoms.
Legal Obligations
We process personal data when required to comply with legal obligations, such as tax regulations or court orders.
Your Rights Under GDPR
Right of Access
You have the right to obtain confirmation about whether we process your personal data and to access that data. We will provide a copy of your personal data in a commonly used electronic format.
Right to Rectification
If your personal data is inaccurate or incomplete, you have the right to request correction or completion.
Right to Erasure
Under certain circumstances, you have the right to request deletion of your personal data, including when data is no longer necessary for its original purpose or when you withdraw consent.
Right to Restriction of Processing
You may request that we restrict processing of your personal data in specific situations, such as when you contest data accuracy or object to processing.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Rights Related to Automated Decision-Making
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.
Exercising Your Rights
To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month, though this may be extended by two additional months for complex requests. We will inform you of any extension and the reasons for delay.
We may require verification of your identity before processing requests. If we refuse a request, we will explain our reasons and inform you of your right to lodge a complaint with a supervisory authority.
Data Protection Impact Assessments
We conduct data protection impact assessments for processing activities that pose high risks to your rights and freedoms, implementing appropriate measures to mitigate identified risks.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you without undue delay. We will also report qualifying breaches to the appropriate supervisory authority within 72 hours of becoming aware.
Data Transfers
We primarily process data within the United Kingdom and European Economic Area. If we transfer data to countries outside these regions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected or as required by law. Specific retention periods vary depending on the type of data and purpose of processing:
- Inquiry data: Three years from last contact
- Client project data: Seven years after project completion
- Financial records: Seven years as required by law
- Marketing consent: Until withdrawn or three years of inactivity
Children's Data
Our services are not directed to children under 16. We do not knowingly process personal data of children. If we become aware of such processing, we will take steps to delete the data.
Contact and Complaints
For questions about our GDPR compliance or to exercise your rights, contact us at [email protected].
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom
Tel: 0303 123 1113
Website: ico.org.uk
Updates to This Information
We may update this GDPR compliance information to reflect changes in our practices or legal requirements. Updated versions will be posted on this page with a revision date.