GDPR Compliance

Silvervein Dusk Limited is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about how we handle personal data in accordance with these regulations.

Data Controller Information

Silvervein Dusk Limited acts as the data controller for personal information collected through our website and services. Our contact details are:

Silvervein Dusk Limited
47 Westbrook House
Canary Wharf
London E14 5HQ
Email: [email protected]

Lawful Basis for Processing

We process personal data only when we have a valid lawful basis. The specific basis depends on the type of processing:

• Contract: Processing necessary to provide services you have requested or to take steps before entering a contract with you.
• Legitimate Interests: Processing necessary for our legitimate business interests, provided these do not override your rights. This includes responding to enquiries, improving our services, and maintaining security.
• Legal Obligation: Processing required to comply with legal or regulatory requirements.
• Consent: Where you have given specific consent for processing, such as for certain marketing communications.

Your Data Protection Rights

Under UK GDPR, you have comprehensive rights regarding your personal data:

Right of Access

You may request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request, free of charge in most circumstances.

Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to request correction. We will respond within one month.

Right to Erasure

In certain circumstances, you may request that we delete your personal data. This right applies when:

• The data is no longer necessary for its original purpose
• You withdraw consent (where consent was the basis for processing)
• You object to processing and there are no overriding legitimate grounds
• The data has been processed unlawfully

Note that we may need to retain certain data for legal or regulatory compliance.

Right to Restrict Processing

You may request that we limit how we use your data while we address concerns about accuracy, lawfulness, or our legitimate interests.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used format.

Right to Object

You may object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making

We do not currently use automated decision-making or profiling that produces legal or similarly significant effects.

Data Processing Activities

We maintain records of our processing activities as required by Article 30 of UK GDPR. Key processing activities include:

• Client consultation and service delivery
• Website analytics and performance monitoring
• Communication management
• Financial and administrative record keeping

Data Protection Measures

We implement appropriate technical and organisational measures including:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorised personnel
• Regular security assessments and updates
• Staff training on data protection responsibilities
• Secure disposal of data when no longer required

International Data Transfers

We primarily process data within the United Kingdom. Where any data is transferred outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or transfers to countries with adequate data protection frameworks.

Data Breach Procedures

We have procedures to detect, investigate, and report personal data breaches. Where a breach is likely to result in high risk to your rights and freedoms, we will notify you without undue delay. All breaches meeting the notification threshold will be reported to the ICO within 72 hours.

Children's Data

Our services are directed at adults. We do not knowingly collect personal data from individuals under 18 without parental consent.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at:

Email: [email protected]

We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests.

Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Information

We review our data protection practices regularly and may update this page accordingly. The date at the top of our Privacy Policy indicates when it was last reviewed.