Last updated: January 2024
Our Commitment to GDPR
kaoliorogr is fully committed to compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We recognise the importance of protecting personal data and have implemented comprehensive measures to ensure your information is handled lawfully, fairly, and transparently.
Data Controller
kaoliorogr acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing personal data related to our historical research and heritage services.
Contact:
kaoliorogr
27 Hartwell Street
Cambridge CB2 3PQ
United Kingdom
Email: [email protected]
Your Data Protection Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You may request a copy of the personal data we hold about you. We will respond to valid requests within one month and provide the information free of charge.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to request correction. We will action such requests promptly.
Right to Erasure
You may request deletion of your personal data where there is no compelling reason for continued processing. This right is subject to certain exceptions, including legal obligations and the establishment or defence of legal claims.
Right to Restrict Processing
You may request restriction of processing in certain circumstances, such as when you contest the accuracy of data or object to processing.
Right to Data Portability
You may request transfer of your personal data to another organisation or directly to you in a structured, commonly used, machine-readable format.
Right to Object
You may object to processing based on legitimate interests, direct marketing, or research purposes.
Rights Related to Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests, with notification of any extension.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Contractual necessity: To perform our research services and fulfil agreements with clients
- Consent: Where you have explicitly agreed to specific processing activities
- Legitimate interests: For business operations, security, and service improvement, balanced against your rights
- Legal compliance: To meet our legal and regulatory obligations
Data Processing Activities
We maintain records of our data processing activities as required by GDPR Article 30. Our processing activities include:
- Client relationship management
- Research project delivery
- Website analytics and improvement
- Communications and marketing (with consent)
- Financial and administrative records
Data Protection Measures
We implement appropriate technical and organisational measures to protect personal data, including:
- Encryption of data in transit and at rest
- Access controls and authentication requirements
- Regular security assessments
- Staff training on data protection
- Secure disposal of physical and digital records
Data Breach Procedures
We have procedures to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where required, notify affected individuals without undue delay.
International Data Transfers
Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
Complaints
If you are dissatisfied with how we handle your personal data, please contact us first to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Updates to This Notice
We review our GDPR compliance regularly and may update this notice to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.