Our commitment to protecting your data under the General Data Protection Regulation.
Last updated: September 2024
nimble-star is committed to ensuring that our data processing activities comply with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page explains how we fulfil our obligations under these regulations.
For the purposes of the GDPR, nimble-star acts as the data controller for personal information collected through our website and in the course of providing our services.
Contact details:
nimble-star
42 Spinningfields Square
Manchester, M3 3JE
[email protected]
We process personal data under one or more of the following lawful bases:
The GDPR provides you with the following rights:
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
You have the right to request that we erase your personal data, under certain conditions.
You have the right to request that we restrict the processing of your personal data, under certain conditions.
You have the right to object to our processing of your personal data, under certain conditions.
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
If you wish to exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month. In certain circumstances, we may extend this period by a further two months, in which case we will inform you.
We may request specific information from you to help us confirm your identity and ensure your right to access your personal data. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to affected individuals, we will also notify those individuals directly.
Where we transfer personal data outside the UK or European Economic Area, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions.
Given the nature and scale of our processing activities, we have not appointed a dedicated Data Protection Officer. However, our management team oversees data protection compliance. For any data protection queries, please contact us at [email protected].
If you are not satisfied with how we handle your personal data or your request to exercise your rights, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance information from time to time. We encourage you to review this page periodically for the latest information on our data protection practices.