GDPR Compliance

Our Commitment to Data Protection

bamboo-echo is fully committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognise the importance of protecting personal data and respecting the privacy rights of individuals.

Data Controller Information

bamboo-echo acts as the data controller for personal information collected through this website and during service delivery. Our contact details are:

bamboo-echo
47 Thornbury Court
Birmingham, B15 2TH
[email protected]

Principles We Follow

In accordance with UK GDPR, we adhere to the following data protection principles:

Lawfulness, Fairness, and Transparency

We process personal data lawfully and transparently. We clearly communicate how and why we use your information.

Purpose Limitation

We collect data for specified, explicit, and legitimate purposes. We do not process data in ways incompatible with those purposes.

Data Minimisation

We collect only the personal data necessary for our stated purposes. We do not request or store excessive information.

Accuracy

We take reasonable steps to ensure personal data is accurate and kept up to date. You can request corrections at any time.

Storage Limitation

We retain personal data only for as long as necessary. We have defined retention periods for different categories of data.

Integrity and Confidentiality

We implement appropriate security measures to protect personal data against unauthorised processing, loss, or damage.

Accountability

We maintain records of our processing activities and can demonstrate compliance with these principles.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to Be Informed

You have the right to clear information about how we collect and use your data. This is provided through our Privacy Policy and this page.

Right of Access

You can request a copy of the personal data we hold about you. We will respond within one month of receiving a valid request.

Right to Rectification

If your personal data is inaccurate or incomplete, you can request that we correct or complete it.

Right to Erasure

In certain circumstances, you can request that we delete your personal data. This applies when:

• The data is no longer necessary for its original purpose
• You withdraw consent (where consent was the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The data was unlawfully processed

Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances, such as while we verify accuracy or consider an objection.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision Making

We do not use automated decision-making that produces legal or similarly significant effects on individuals.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests.

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to individuals' rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay.

Supervisory Authority

The supervisory authority for data protection in the United Kingdom is the Information Commissioner's Office (ICO). If you are unsatisfied with our handling of your data or believe we have violated your rights, you may lodge a complaint with the ICO:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
ico.org.uk

Updates to This Information

We review our GDPR compliance measures regularly and may update this page to reflect changes in our practices or legal requirements.