GDPR Compliance Statement

Our Commitment to Data Protection

brisklynx is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This statement outlines how we comply with data protection principles and your rights as a data subject.

Data Controller Information

For the purposes of UK data protection legislation, brisklynx acts as the data controller for personal information collected through our website and services.

Contact details:
Email: [email protected]
Address: 127 Colmore Row, Birmingham, B3 3AG, United Kingdom

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so:

• Consent: When you explicitly agree to our processing of your data, such as when submitting contact forms or subscribing to communications
• Contractual necessity: When processing is necessary to perform services you have requested or to take steps at your request before entering into a contract
• Legitimate interests: When processing serves our legitimate business interests, such as improving services, preventing fraud, or maintaining security, provided this does not override your fundamental rights
• Legal obligation: When we must process data to comply with legal or regulatory requirements

Data Protection Principles

We adhere to the following principles when processing personal data:

• Lawfulness, fairness, transparency: We process data lawfully, fairly, and in a transparent manner
• Purpose limitation: We collect data for specified, explicit, legitimate purposes and do not process it in ways incompatible with those purposes
• Data minimisation: We collect only data that is adequate, relevant, and limited to what is necessary
• Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date
• Storage limitation: We retain data only for as long as necessary for the purposes for which it was collected
• Integrity and confidentiality: We implement appropriate security measures to protect against unauthorised or unlawful processing and accidental loss, destruction, or damage

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to be Informed

You have the right to clear information about how we collect and use your personal data, provided through our Privacy Policy and this GDPR statement.

Right of Access

You can request confirmation of whether we process your personal data and obtain a copy of that data. We will respond to access requests within one month.

Right to Rectification

You can request correction of inaccurate or incomplete personal data. We will assess the accuracy and make amendments where appropriate.

Right to Erasure

In certain circumstances, you can request deletion of your personal data, including when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal ground for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Erasure is required to comply with a legal obligation

Right to Restrict Processing

You can request restriction of processing in specific situations, such as when you contest the accuracy of data or object to processing.

Right to Data Portability

Where processing is based on consent or contract performance and is carried out by automated means, you can request to receive your data in a structured, commonly used, machine-readable format and have it transmitted to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Rights Related to Automated Decision Making

We do not currently use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Exercising Your Rights

To exercise any of your rights, contact us at [email protected]. We will respond to requests within one month, though this may be extended by two months for complex or numerous requests. We will inform you of any extension within one month of receiving your request.

We may request specific information from you to confirm your identity before processing requests involving personal data.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113

Data Security Measures

We implement appropriate technical and organisational security measures, including:

• Encryption of data in transit and at rest where appropriate
• Access controls limiting data access to authorised personnel only
• Regular security assessments and updates
• Staff training on data protection requirements
• Secure deletion procedures for data no longer required

International Data Transfers

We process and store personal data primarily within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK data protection requirements.

Data Breach Notification

In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you without undue delay in accordance with our legal obligations.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.

Questions and Concerns

For questions about our GDPR compliance or data protection practices, contact us at [email protected].