Our commitment to protecting your personal data under UK GDPR
Sparkling Flute is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of your personal data seriously and have implemented comprehensive measures to ensure your rights are respected.
For the purposes of the UK GDPR, the data controller is:
Sparkling Flute
42 Renewable Way
Manchester, M1 4EG
United Kingdom
Email: [email protected]
Under the UK GDPR, you have the following rights concerning your personal data:
You have the right to obtain confirmation as to whether your personal data is being processed and, if so, access to that data along with information about how it is processed. You may request a copy of your personal data free of charge.
You have the right to have inaccurate personal data corrected without undue delay. You also have the right to have incomplete personal data completed.
Also known as the "right to be forgotten", you may request the deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected, or when you withdraw consent.
You have the right to restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.
You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in automated decision-making.
To exercise any of the rights described above, please contact us at [email protected]. We will respond to your request within one month of receipt. In complex cases or where we receive numerous requests, we may extend this period by two additional months, in which case we will inform you accordingly.
We may request specific information from you to confirm your identity before processing your request. This is a security measure to ensure personal data is not disclosed to unauthorised persons.
We process personal data for the following purposes:
We rely on the following legal bases under Article 6 of the UK GDPR:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our standard retention periods are:
We have implemented appropriate technical and organisational measures to protect personal data, including:
Where we transfer personal data outside the UK, we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Where the breach poses a high risk, we will also notify affected individuals directly.
If you are not satisfied with how we handle your personal data or your rights request, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance notice from time to time. The current version will always be available on our website with the date of last revision.
Last updated: January 2024