Your rights under the General Data Protection Regulation
As a company operating within the United Kingdom and serving customers throughout Europe, we are committed to complying with the General Data Protection Regulation and protecting your personal data rights.
We process your personal data under the following legal grounds:
When you place an order, we process your information to fulfill our contractual obligations, including:
We may process certain data based on legitimate business interests, such as:
We process data when required to comply with legal obligations, including tax reporting, accounting requirements, and responding to lawful requests from authorities.
For certain activities such as marketing communications or non-essential cookies, we obtain your explicit consent before processing your data.
Under GDPR, you have the following rights regarding your personal data:
You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.
You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.
You have the right to request deletion of your personal data under certain conditions, such as when the data is no longer necessary for the purposes it was collected or when you withdraw consent.
You have the right to request restriction of processing your personal data under certain conditions, such as when you contest the accuracy of the data.
You have the right to object to our processing of your personal data under certain conditions, particularly for processing based on legitimate interests.
You have the right to request transfer of your data to another organization or directly to you in a structured, commonly used, machine-readable format.
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at [email protected] with the subject line "GDPR Request." Include:
We will respond to your request within thirty days. If we need additional time, we will inform you of the reason and extension period.
The data controller responsible for your personal information is:
Amethyst-delta Ltd
42 Threadneedle Street
London EC2R 8AY
United Kingdom
Email: [email protected]
We primarily store and process data within the European Economic Area. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:
We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy:
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and within seventy-two hours of becoming aware of the breach, where feasible. The notification will include:
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority.
For the United Kingdom, the supervisory authority is:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
If you are located in another EU member state, you can contact your local data protection authority.
We may update this GDPR information periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website and, where appropriate, via email.
If you have questions about your data protection rights or our GDPR compliance, please contact us at [email protected].