GDPR Compliance

Neo-rhythm is committed to protecting your personal data in accordance with the UK General Data Protection Regulation and Data Protection Act 2018.

Data controller

Neo-rhythm is the data controller responsible for personal information collected through this website. Our contact details are available on the Contact page.

Legal basis for processing

We process personal data under the following legal bases:

• Consent: When you submit an enquiry form, you provide explicit consent for us to process your information to respond to your request.
• Legitimate interests: We may process information based on legitimate business interests, such as maintaining website security and preventing fraud.
• Legal obligation: We retain certain information to comply with UK legal and regulatory requirements.

Data subject rights

You have the following rights regarding your personal data:

Right of access

You can request a copy of the personal information we hold about you. We will provide this within one month of your request.

Right to rectification

If information we hold about you is inaccurate or incomplete, you can request correction.

Right to erasure

You can request deletion of your personal data where there is no compelling reason for continued processing.

Right to restrict processing

You can request that we limit how we use your data in certain circumstances.

Right to data portability

You can request that we transfer your data to another organisation in a structured, commonly used format.

Right to object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights related to automated decision-making

We do not use automated decision-making or profiling on this website.

How to exercise your rights

To exercise any of these rights, contact us at [email protected] with details of your request. We will respond within one month. If your request is complex or we receive multiple requests, we may extend this period by two months and will inform you of the extension.

Right to lodge a complaint

If you believe we have not handled your personal data in accordance with UK data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). Contact details are available at ico.org.uk

International data transfers

We do not transfer personal data outside the United Kingdom. All data is stored and processed within the UK.

Data security

We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, or destruction. Access to personal information is restricted to authorised personnel only.

Data retention periods

Enquiry data is retained for up to 24 months. Client data is retained for the duration of engagement plus seven years to comply with UK business record requirements. Technical logs are retained for 90 days for security purposes.

Last updated: September 2024