Your data protection rights under UK GDPR
Cloudy Valley is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our approach to data protection and your rights as a data subject.
Cloudy Valley acts as the data controller for personal information collected through our website and in the course of providing our services. We are responsible for deciding how and why your personal data is processed.
Data Controller: Cloudy Valley
Address: 47 Pemberton Road, London, SW11 5PQ
Email: [email protected]
We only process personal data where we have a lawful basis to do so. The lawful bases we rely on include:
Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications.
Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract (e.g., providing a quote for services).
Where processing is necessary for our legitimate interests, provided those interests do not override your fundamental rights and freedoms. Our legitimate interests include:
Where we need to process your data to comply with legal or regulatory requirements.
Under the UK GDPR, you have the following rights:
You have the right to know how we collect and use your personal data. This information is provided in our Privacy Policy.
You can request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month.
You can ask us to correct inaccurate personal data or complete incomplete data.
You can ask us to delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose we collected it.
You can ask us to limit how we use your personal data in certain circumstances.
You can request that we transfer your personal data to another organisation in a structured, commonly used format.
You can object to processing based on legitimate interests or for direct marketing purposes.
You have rights regarding automated decision-making and profiling. We do not currently use automated decision-making processes that significantly affect you.
To exercise any of these rights, please contact us at:
Email: [email protected]
Post: Cloudy Valley, 47 Pemberton Road, London, SW11 5PQ
We will respond to your request within one month. In complex cases, we may extend this period by two months, but we will inform you if this is necessary.
We may ask for proof of identity before processing your request.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:
We primarily store and process your data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in compliance with UK GDPR requirements.
Given the nature and scale of our processing activities, we have not appointed a dedicated Data Protection Officer. However, our management team is responsible for data protection compliance.
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We encourage you to contact us first so we can address your concerns directly.
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated date.