GDPR Compliance

jade-ridge is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we comply with data protection requirements.

Data Controller

jade-ridge acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing personal data in connection with our company formation and corporate support services.

Lawful Basis for Processing

We process personal data under the following lawful bases as defined by Article 6 of UK GDPR:

• Performance of a contract: When you engage our services, we process your data to fulfil our contractual obligations to you
• Legal obligation: We process certain data to comply with UK company law, anti-money laundering regulations, and tax requirements
• Legitimate interests: We may process data for our legitimate business interests, such as improving our services and preventing fraud, where these interests do not override your rights
• Consent: Where required, we obtain your explicit consent before processing, particularly for marketing communications

Categories of Personal Data

We process the following categories of personal data:

• Identity data: names, dates of birth, nationality
• Contact data: email addresses, postal addresses
• Financial data: payment information for services
• Technical data: IP addresses, browser information
• Transaction data: records of services provided

Your Rights Under UK GDPR

UK GDPR provides you with the following rights:

Right of Access (Article 15)

You have the right to request a copy of the personal data we hold about you. We will respond to such requests within one month.

Right to Rectification (Article 16)

You may request correction of any inaccurate personal data we hold about you.

Right to Erasure (Article 17)

In certain circumstances, you may request deletion of your personal data. This right does not apply where we are required to retain data for legal compliance.

Right to Restrict Processing (Article 18)

You may request that we limit how we use your data in specific circumstances.

Right to Data Portability (Article 20)

Where processing is based on consent or contract, you may request your data in a structured, commonly used format.

Right to Object (Article 21)

You may object to processing based on legitimate interests or for direct marketing purposes.

Data Security Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data during transmission and storage
• Access controls limiting data access to authorised personnel
• Regular security assessments and updates
• Staff training on data protection requirements
• Secure disposal procedures for data no longer required

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected. Our retention periods are determined by:

• Legal requirements, including Companies House record-keeping obligations
• Contractual obligations
• Legitimate business needs

When data is no longer required, it is securely deleted or anonymised.

Third-Party Processors

Where we engage third-party processors to handle personal data on our behalf, we ensure:

• Written contracts are in place with appropriate data protection clauses
• Processors provide sufficient guarantees of their security measures
• Processing is conducted only on our documented instructions

International Transfers

We primarily process data within the United Kingdom. Any transfers to countries outside the UK are conducted with appropriate safeguards in place, such as standard contractual clauses approved by the Information Commissioner's Office.

Data Breach Procedures

In the event of a personal data breach, we have procedures in place to:

• Detect and assess the breach
• Contain and recover from the breach
• Notify the Information Commissioner's Office within 72 hours where required
• Notify affected individuals where there is high risk to their rights and freedoms

Exercising Your Rights

To exercise any of your rights under UK GDPR, please contact us at:

Email: [email protected]
Address: 71 Queen Victoria Street, London, EC4V 4AY, United Kingdom

We will respond to your request within one month. If your request is complex, we may extend this by up to two additional months, in which case we will inform you of the extension and reasons.

Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

Last updated: January 2024