GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

neo-pine is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognise the importance of protecting personal data and ensuring transparency in how we process information.

Data Controller Information

For the purposes of data protection legislation, neo-pine is the data controller responsible for your personal data. Our contact details are:

neo-pine
47 Portland Street
Manchester, M1 3LF
United Kingdom
Email: [email protected]

Principles We Follow

In accordance with UK GDPR, we adhere to the following data protection principles:

• Lawfulness, fairness, and transparency: We process personal data lawfully and in a transparent manner
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes only
• Data minimisation: We limit data collection to what is necessary for the intended purpose
• Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date
• Storage limitation: We retain data only for as long as necessary
• Integrity and confidentiality: We implement appropriate security measures to protect personal data
• Accountability: We take responsibility for compliance and can demonstrate it

Your Rights Under UK GDPR

As a data subject, you have the following rights regarding your personal data:

Right to Be Informed

You have the right to receive clear information about how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR statement.

Right of Access

You can request a copy of the personal data we hold about you. We will respond to such requests within one month and provide the information free of charge.

Right to Rectification

If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You can request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another organisation.

Right to Object

You can object to the processing of your personal data in certain circumstances, including processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us at:

Email: [email protected]

We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, but we will inform you of any delay within the first month.

Special Category Data

Some of the services we provide may require us to process special category data, such as health information for disability benefits cases. We only process this data with your explicit consent and when it is necessary for the provision of our services.

Data Breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where required, inform affected individuals without undue delay.

Third-Party Processors

Where we engage third parties to process personal data on our behalf, we ensure they provide sufficient guarantees regarding their data protection practices. All processors are bound by written contracts that require compliance with UK GDPR.

International Transfers

We do not transfer personal data outside the United Kingdom or the European Economic Area. All data processing takes place within these jurisdictions.

Complaints

If you are dissatisfied with how we handle your personal data or believe we have not complied with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date.