Our commitment to data protection and your rights under the General Data Protection Regulation.
Heath-trek is committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our approach to GDPR compliance and explains your rights as a data subject.
We process personal data lawfully, fairly, and transparently. Our data protection practices are designed to:
Under GDPR, we must have a valid legal basis for processing personal data. Depending on the nature of our relationship with you, we rely on:
Where you have actively provided consent for specific processing activities, such as subscribing to communications or submitting an enquiry form. You may withdraw consent at any time.
Where processing is required to perform a contract with you or to take steps at your request before entering into a contract. This applies to client engagements where we deliver consulting services.
Where processing serves our legitimate business interests without unduly affecting your rights. We conduct legitimate interests assessments to balance our interests against potential impacts on individuals.
Where we must process data to comply with legal requirements, such as maintaining financial records or responding to regulatory requests.
GDPR grants you specific rights regarding your personal data:
You may request confirmation of whether we process your data and obtain a copy of that data. We respond to access requests within one month.
You may request correction of inaccurate personal data or completion of incomplete data.
In certain circumstances, you may request deletion of your personal data. This right applies where data is no longer necessary for its original purpose, consent is withdrawn, or processing was unlawful.
You may request that we limit processing of your data in specific situations, such as while we verify accuracy following a rectification request.
Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used format.
You may object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling grounds that override your interests.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making processes.
To exercise any of your data protection rights, please contact us at:
Heath-trek
47 Greenway Business Centre
Hampstead, London NW3 2PT
Email: [email protected]
We may ask you to verify your identity before responding to requests. We aim to respond to all valid requests within one month. If a request is complex or we receive numerous requests, we may extend this period by two months, informing you accordingly.
Given the nature and scale of our data processing activities, we have not appointed a dedicated Data Protection Officer. However, data protection queries should be directed to our Managing Director, who oversees our compliance programme.
We primarily process data within the United Kingdom. If we transfer personal data outside the UK, we ensure adequate protection through:
We maintain procedures for detecting, reporting, and investigating personal data breaches. Where a breach is likely to result in high risk to affected individuals, we will notify them without undue delay. Reportable breaches will be communicated to the Information Commissioner's Office within 72 hours of becoming aware.
The Information Commissioner's Office (ICO) is the UK's supervisory authority for data protection. If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the ICO:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
SK9 5AF
We review our GDPR compliance practices regularly and update this page as necessary. Please check periodically for any changes.
Last updated: September 2024