Our commitment to protecting your data rights under EU regulations
Last updated: January 2024
blossom-photon is committed to ensuring compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we meet our obligations under these regulations and explains your rights as a data subject.
blossom-photon acts as the data controller for personal information collected through our website and services. As the data controller, we determine the purposes and means of processing your personal data.
Contact details:
blossom-photon
47 Kensington High Street
London W8 5SE
United Kingdom
Email: [email protected]
We process personal data under the following lawful bases as defined by Article 6 of the GDPR:
Processing necessary for the performance of a contract with you, including:
Processing necessary for our legitimate business interests, including:
Processing necessary to comply with legal requirements, including:
Where you have given explicit consent, such as:
The GDPR provides you with specific rights regarding your personal data:
You have the right to obtain confirmation of whether we process your personal data and to receive a copy of that data along with information about how it is processed.
You have the right to have inaccurate personal data corrected and incomplete data completed.
Also known as the "right to be forgotten", you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects.
To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month. This period may be extended by two further months where necessary, taking into account the complexity and number of requests.
We may request specific information from you to help us confirm your identity and ensure your right to access your personal data or exercise any of your other rights.
When we transfer personal data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:
For any queries regarding our data protection practices or to exercise your rights, please contact our data protection team at [email protected].
If you are not satisfied with our response or believe we are processing your personal data in a manner that is not compliant with the law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: www.ico.org.uk
We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.