Understanding your data protection rights under UK GDPR
orchard-port is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of personal data seriously and have implemented appropriate measures to ensure that all personal information is processed lawfully, fairly, and transparently.
As a data subject, you have specific rights regarding your personal information. We are committed to facilitating the exercise of these rights.
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month of receipt, though this period may be extended by a further two months for complex requests.
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. We will take reasonable steps to verify the accuracy of the information you provide and update our records accordingly.
Also known as the right to be forgotten, you may request that we delete your personal data in certain circumstances, including when the data is no longer necessary for the purpose for which it was collected, or when you withdraw consent. This right is not absolute and may be subject to legal exceptions.
You have the right to request that we limit the processing of your personal data in specific circumstances, such as when you contest the accuracy of the data or when processing is unlawful but you do not want us to erase it.
Where processing is based on consent or a contract, and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another controller where technically feasible.
You have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you. We do not currently use automated decision-making processes that would be subject to this right.
We implement a range of technical and organisational measures to protect personal data:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
We primarily process data within the United Kingdom. Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner, or transfers to countries with adequacy decisions.
While we are not required to appoint a Data Protection Officer under UK GDPR, we have designated a data protection lead who is responsible for overseeing compliance with data protection legislation. For data protection enquiries, please contact us at the address below.
To exercise any of your data protection rights, please submit your request to:
Email: [email protected]
Address: Data Protection Lead, orchard-port, 47 Commerce Street, Manchester, M2 4WQ, United Kingdom
Please provide sufficient information to verify your identity and specify which right you wish to exercise. We may request additional information to confirm your identity before processing your request.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We may update this GDPR information periodically to reflect changes in our practices or legal requirements. The date of the last update will be noted at the top of this page.
Last updated: January 2024