Our Commitment to Data Protection
duskvine is committed to protecting your personal data and respecting your privacy. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This page explains your rights under data protection law and how to exercise them.
Data Controller
duskvine is the data controller responsible for your personal data collected through this website and our services.
Contact details:
duskvine
47 Broadgate Circle
London EC2M 2QS
United Kingdom
Email: [email protected]
Your Rights Under GDPR
Under the UK GDPR, you have the following rights regarding your personal data:
Right to Be Informed
You have the right to be informed about how we collect and use your personal data. This information is provided in our Privacy Policy and at the point of data collection.
Right of Access
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.
Right to Rectification
You have the right to request that we correct any inaccurate personal data or complete any incomplete personal data we hold about you.
Right to Erasure
Also known as the "right to be forgotten", you have the right to request that we delete your personal data in certain circumstances, such as:
- The data is no longer necessary for its original purpose
- You withdraw consent (where consent was the legal basis)
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restrict Processing
You have the right to request that we limit the way we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. duskvine does not currently use automated decision-making that would trigger this right.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected] with:
- Your full name and contact details
- A description of the right you wish to exercise
- Any information to help us locate your data
We will respond to your request within one month. In complex cases, we may extend this by up to two months, but we will inform you if this is necessary.
Identity Verification
To protect your personal data, we may need to verify your identity before processing your request. We will not charge a fee for most requests, but we may charge a reasonable fee if your request is manifestly unfounded or excessive.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Contract: Processing necessary to fulfil our agreement when you enrol in a course
- Consent: Where you have explicitly consented, such as for marketing emails
- Legitimate Interests: For purposes such as improving our services and fraud prevention
- Legal Obligation: Where we must comply with legal requirements
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected. Specific retention periods are outlined in our Privacy Policy. When data is no longer needed, it is securely deleted or anonymised.
Data Security
We implement appropriate technical and organisational measures to protect personal data, including:
- Encryption of data in transit and at rest
- Access controls limiting who can view personal data
- Regular security assessments and updates
- Staff training on data protection
Data Breaches
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. If the breach is likely to result in high risk to you, we will also notify you directly.
International Transfers
If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR compliance information from time to time. Changes will be posted on this page with an updated revision date.