GDPR Compliance

Our Commitment

snug-works is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our responsibilities as a data controller seriously and have implemented comprehensive measures to protect your personal information.

Data Controller

snug-works acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.

Contact details for data protection enquiries:

snug-works
14 Queen Square
Bristol, BS1 4NT
United Kingdom

Email: [email protected]

Lawful Basis for Processing

We only process personal data when we have a lawful basis to do so. The bases we rely upon include:

Consent

Where you have provided clear, affirmative consent for us to process your data for specific purposes. You may withdraw consent at any time by contacting us.

Contractual Necessity

Where processing is necessary to perform a contract with you or to take steps at your request before entering a contract.

Legitimate Interests

Where processing is necessary for our legitimate business interests, such as improving our services, provided these interests do not override your fundamental rights and freedoms.

Legal Obligation

Where we are required to process data to comply with a legal obligation.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of your request.

Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to have it corrected.

Right to Erasure

In certain circumstances, you have the right to request that we delete your personal data. This applies when the data is no longer necessary for its original purpose, you withdraw consent, or the data has been unlawfully processed.

Right to Restrict Processing

You may request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.

Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not currently use automated decision-making processes that produce legal or similarly significant effects.

Exercising Your Rights

To exercise any of the rights described above, please contact us using the details provided. We will respond to your request within one month. If your request is complex or numerous, we may extend this period by a further two months, but we will inform you of any extension within the first month.

There is no fee for making a request, though we may charge a reasonable fee if requests are manifestly unfounded or excessive.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. If the breach is likely to result in high risk to you, we will also notify you directly without undue delay.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk

We would appreciate the opportunity to address your concerns directly before you approach the ICO, so please contact us first if possible.

Updates to This Information

We review our data protection practices regularly and may update this information accordingly. Any significant changes will be communicated through our website.