Data Protection

embermist-wolf is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains your rights and how we fulfill our obligations as a data controller.

Data Controller Information

The data controller responsible for your personal information is:

embermist-wolf
42 Belgrave Square
London SW1X 8QT
United Kingdom
Email: [email protected]

Your Data Protection Rights

Right to Be Informed

You have the right to clear, transparent information about how we use your personal data. This information is provided through our Privacy Policy and related documentation. We explain:

• What data we collect
• Why we collect it
• How we use it
• Who we share it with
• How long we retain it

Right of Access

You can request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will provide:

• Confirmation that we process your data
• A copy of your personal data
• Additional information about how we process your data

We will respond to SARs within one month of receipt. In complex cases, we may extend this by an additional two months and will inform you if this becomes necessary.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction. We will update your information within one month and notify any third parties to whom we have disclosed the data.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Legal obligations require erasure

This right is not absolute. We may need to retain certain information for legal, accounting, or regulatory purposes.

Right to Restriction of Processing

You can request that we limit how we use your data in these situations:

• You contest the accuracy of the data
• Processing is unlawful but you prefer restriction over erasure
• We no longer need the data but you require it for legal claims
• You have objected to processing and await verification of legitimate grounds

During restriction, we will store your data but not use it without your consent, except for legal claims or protecting others' rights.

Right to Data Portability

When processing is based on consent or contract performance and carried out by automated means, you can request:

• Receive your personal data in a structured, commonly used, machine-readable format
• Transmit this data to another controller where technically feasible

This right applies only to data you have provided to us.

Right to Object

You have the right to object to processing based on:

• Legitimate interests: We must stop processing unless we demonstrate compelling legitimate grounds that override your interests
• Direct marketing: We will cease all marketing communications immediately upon request
• Research or statistics: Unless processing is necessary for public interest tasks

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. Currently, we do not engage in automated decision-making of this nature.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the following methods:

Email: [email protected]
Post: embermist-wolf, 42 Belgrave Square, London SW1X 8QT, United Kingdom

When submitting a request, please include:

• Your full name
• Email address or contact information on record
• Clear description of your request and the right you wish to exercise
• Proof of identity (if we cannot verify your identity from existing records)

Verification Process

To protect your privacy, we must verify your identity before fulfilling data protection requests. We may request additional information or documentation if we cannot confirm your identity from records we already hold.

Response Timeframes

We aim to respond to all data protection requests within one month of receipt. For complex requests or high volumes, we may extend this by two additional months. We will inform you of any extension within the initial one-month period and explain the reasons.

Fees

We do not charge fees for most data protection requests. However, we may charge a reasonable administrative fee if:

• Your request is clearly unfounded or excessive
• You request additional copies of the same information

We will inform you of any applicable fees before proceeding.

Right to Withdraw Consent

Where we process your data based on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. To withdraw consent, contact us using the details provided above.

Complaints and Concerns

If you believe we have not handled your data properly or violated your rights, please contact us first so we can address your concerns. If you remain unsatisfied, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom

Telephone: 0303 123 1113
Website: ico.org.uk

Data Protection Principles

We process personal data in accordance with the following principles:

• Lawfulness, fairness, transparency: We process data lawfully and inform you clearly about our practices
• Purpose limitation: We collect data for specified, explicit purposes and do not use it incompatibly
• Data minimization: We collect only data that is adequate, relevant, and necessary
• Accuracy: We take reasonable steps to ensure data is accurate and up to date
• Storage limitation: We retain data only as long as necessary for stated purposes
• Integrity and confidentiality: We protect data with appropriate security measures
• Accountability: We can demonstrate compliance with these principles

Children's Data

We do not knowingly process personal data of individuals under 18 years of age without appropriate parental or guardian consent. If you believe we have collected data from a minor inappropriately, please contact us immediately.

Data Breach Notification

In the unlikely event of a personal data breach that poses risks to your rights and freedoms, we will notify you without undue delay. We will explain the nature of the breach, its likely consequences, and measures we have taken or propose to take.

Updates to This Information

We review and update our data protection practices regularly. Any changes to this page will be posted here with a notification of the update date. Significant changes will be communicated through additional channels where appropriate.

Contact Us

For questions about data protection, your rights, or our practices, please contact us at [email protected] or write to the address provided above.