GDPR Compliance

Our Commitment to Data Protection

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we comply with these regulations and explains your rights as a data subject.

Lawful Basis for Processing

We process personal data under several lawful bases depending on the context. When you engage our consultation services, processing is based on contract performance. For marketing communications, we rely on legitimate interests or explicit consent. Where required by law, we process data for compliance purposes.

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete information.
• Right to erasure: You can request deletion of your personal data in certain circumstances.
• Right to restrict processing: You can ask us to limit how we use your data.
• Right to data portability: You can request your data in a structured, commonly used format.
• Right to object: You can object to processing based on legitimate interests.
• Rights related to automated decision-making: We do not use automated profiling or decision-making that produces legal or similarly significant effects.

Exercising Your Rights

To exercise any of these rights, please submit a written request to inquiries@glen-quest.com or send postal correspondence to our office at 42 Park Place, Leeds LS1 2RY, United Kingdom. We will respond to your request within one month of receipt, though this period may be extended by two additional months in complex cases.

We may need to verify your identity before fulfilling certain requests to ensure we do not disclose personal data to unauthorized parties. This verification process typically involves confirming details from previous communications or requesting identification documents.

Data Processing Activities

We maintain records of our data processing activities as required by GDPR. These records include the purposes of processing, categories of data subjects and personal data, recipients of data, retention periods, and security measures implemented.

International Data Transfers

We primarily process data within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or transfers to countries with adequacy decisions.

Data Protection Officer

For questions specifically related to data protection or to submit a formal data protection inquiry, please contact our data protection representative at inquiries@glen-quest.com with "Data Protection Inquiry" in the subject line.

Supervisory Authority

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can contact the ICO through their website at ico.org.uk or by telephone at 0303 123 1113.

Data Breach Notification

In the event of a data breach likely to result in high risk to your rights and freedoms, we will notify you without undue delay. We will also report qualifying breaches to the ICO within 72 hours of becoming aware of the incident, as required by GDPR.

Privacy by Design

We implement privacy by design principles in our operations, incorporating data protection considerations into the development of business processes and systems. We collect only the minimum personal data necessary for specified purposes and retain it only as long as required.

Regular Compliance Review

We regularly review our data protection practices to ensure ongoing compliance with GDPR and to incorporate evolving best practices. This includes periodic assessments of data processing activities, security measures, and staff training on data protection principles.