Understanding your data protection rights
Last updated: November 2024
The UK General Data Protection Regulation (UK GDPR) is the data protection framework that applies in the United Kingdom following the transition from EU membership. It works alongside the Data Protection Act 2018 to give individuals control over their personal data and place obligations on organisations that process it.
Base-mist is committed to full compliance with these regulations in all aspects of our operations.
You have the right to know what personal data we collect, why we collect it, and how we use it. Our Privacy Policy provides this information in detail.
You can request a copy of all personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond within one month of receiving a valid request.
If any personal data we hold is inaccurate or incomplete, you have the right to have it corrected. We will action rectification requests within one month.
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or when consent has been withdrawn.
You can request that we limit how we use your data while concerns about accuracy or lawfulness are resolved.
You can request to receive your personal data in a structured, commonly used format to transfer to another service provider.
You can object to processing of your personal data in certain circumstances, including for direct marketing purposes.
You have rights related to automated decision-making and profiling. Our services do not currently use fully automated decision-making that produces legal or similarly significant effects.
To make a request relating to any of these rights, please contact our Data Protection Officer:
Email: [email protected]
Post: Data Protection Officer, Base-mist, 47 Cathedral Street, Manchester, M4 3BG
We may need to verify your identity before processing requests. We will respond to valid requests within one month, though this period may be extended by two months for complex requests, in which case we will inform you.
As a data controller, Base-mist has specific obligations under UK GDPR:
We have appointed a Data Protection Officer to oversee compliance with data protection regulations and act as a contact point for data subjects and supervisory authorities.
The supervisory authority for data protection in the United Kingdom is the Information Commissioner's Office (ICO). If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the ICO:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Due to the nature of our services, we may process special category data including health information. Such processing is conducted only where necessary for healthcare purposes or where explicit consent has been provided, with enhanced safeguards in place.
This page may be updated to reflect changes in regulations or our practices. Significant updates will be communicated through appropriate channels.