Our Commitment to Data Protection
vine-raven is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines your rights as a data subject and explains how we ensure compliance with data protection legislation.
Data Controller Information
For the purposes of UK GDPR, vine-raven acts as the data controller for personal information collected through our card recovery services. We determine the purposes and means of processing your personal data.
Contact: [email protected]
Your Data Protection Rights
Right to Be Informed
You have the right to clear, transparent information about how we collect and use your personal data. This information is provided in our Privacy Policy and related documents.
Right of Access
You can request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will provide this information free of charge within one month of receiving a valid request.
Right to Rectification
If you believe personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to correction requests within one month.
Right to Erasure
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, including:
- The data is no longer necessary for the purpose it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
This right is not absolute and may be limited by legal obligations requiring us to retain certain information.
Right to Restrict Processing
You can request that we limit how we use your personal data in specific circumstances, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer this data directly to another organization where technically feasible.
Right to Object
You can object to processing of your personal data where we rely on legitimate interests as the legal basis. We must stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
Rights Related to Automated Decision Making
You have rights regarding automated decision making and profiling. We do not use automated decision making or profiling in our card recovery services.
How to Exercise Your Rights
To exercise any of your data protection rights, please contact us at [email protected] with the following information:
- Your full name
- Contact details (email address)
- Description of the right you wish to exercise
- Any relevant details to help us locate your information
We may require proof of identity before processing your request to ensure data security.
Response Timeframes
We aim to respond to all requests within one month of receipt. In complex cases or where we receive multiple requests, this may be extended by up to two additional months. We will inform you of any extension and explain the reasons for the delay.
Data Processing Activities
We process personal data for the following purposes:
- Providing card recovery services
- Customer communication and support
- Business operations and administration
- Legal and regulatory compliance
- Service improvement and analytics
Legal Bases for Processing
We process personal data under the following legal bases:
- Performance of a contract with you
- Legitimate interests in operating our business
- Compliance with legal obligations
- Your explicit consent where required
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements. Specific retention periods are detailed in our Privacy Policy.
Third Party Data Sharing
When we share your data with third parties, we ensure appropriate safeguards are in place through:
- Data processing agreements
- Confidentiality obligations
- Security requirements
- Limited access to necessary data only
Data Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication mechanisms
- Staff training on data protection
- Incident response procedures
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals without undue delay.
International Data Transfers
Your personal data is primarily processed within the United Kingdom. If we transfer data internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Complaints and Supervisory Authority
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
Updates to This Information
We may update this GDPR compliance information to reflect changes in our practices or legal requirements. Material changes will be communicated through our website or direct notification.