Our commitment to data protection under UK GDPR
Last updated: September 2024
brightaspen is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle personal data and your rights under data protection law.
brightaspen acts as the data controller for personal information collected through our website and in the course of providing our environmental consulting services. Our contact details are:
brightaspen
47 Ecclesall Road South
Sheffield, S11 9PL
Email: [email protected]
In processing personal data, we adhere to the following principles:
We process personal data lawfully, fairly and in a transparent manner. We inform individuals about how their data will be used and only collect data for specified, legitimate purposes.
Personal data is collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes.
We only collect personal data that is adequate, relevant and limited to what is necessary for the purposes for which it is processed.
We take reasonable steps to ensure personal data is accurate and, where necessary, kept up to date. Inaccurate data is erased or rectified without delay.
Personal data is kept in a form that permits identification for no longer than necessary for the purposes of processing.
We process personal data in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
Under UK GDPR, you have the following rights regarding your personal data:
You have the right to request access to the personal data we hold about you. We will provide a copy of your data within one month of a valid request.
If your personal data is inaccurate or incomplete, you have the right to request correction. We will respond to rectification requests within one month.
In certain circumstances, you have the right to request deletion of your personal data. This right is not absolute and applies only where specific conditions are met.
You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Where processing is based on consent or contract, and carried out by automated means, you have the right to receive your personal data in a structured, commonly used format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.
You have rights in relation to automated decision-making and profiling. We do not currently use automated decision-making that produces legal or similarly significant effects.
To exercise any of your data protection rights, please contact us at:
Email: [email protected]
Post: brightaspen, 47 Ecclesall Road South, Sheffield, S11 9PL
We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by a further two months, in which case we will inform you.
There is no fee for exercising your rights in most circumstances. However, we may charge a reasonable fee if your request is manifestly unfounded or excessive.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to you, we will also notify you directly.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR information periodically to reflect changes in our practices or legal requirements. We encourage you to review this page regularly.