GDPR Compliance

GDPR Compliance Statement

At Apposite Labs, we are committed to ensuring the privacy and protection of your personal data in accordance with the General Data Protection Regulation (GDPR) of the European Union.

This GDPR Compliance Statement explains how we collect, process, and protect your personal data when you visit our website or use our services.

1. Data Controller

Apposite Labs acts as the data controller for personal data collected through our website and services. As a data controller, we determine the purposes and means of processing personal data.

Contact information for data protection matters:

Email: info@appositelabs.co.uk
Address: Office 9633, 321-323 High Road, Chadwell Heath, Essex, RM6 6AX, United Kingdom

2. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Your consent
• Performance of a contract with you
• Compliance with legal obligations
• Legitimate interests pursued by us or a third party

3. Categories of Personal Data We Process

Depending on your interaction with us, we may collect and process the following categories of personal data:

• Identity data (name, title)
• Contact data (email address, phone number, postal address)
• Technical data (IP address, browser type, device information)
• Usage data (information about how you use our website and services)
• Marketing and communications data (your preferences in receiving marketing from us and communication preferences)

4. Your Data Protection Rights

Under the GDPR, you have the following rights:

• Right to access - You have the right to request copies of your personal data.
• Right to rectification - You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to erasure - You have the right to request that we erase your personal data, under certain conditions.
• Right to restrict processing - You have the right to request that we restrict the processing of your personal data, under certain conditions.
• Right to object to processing - You have the right to object to our processing of your personal data, under certain conditions.
• Right to data portability - You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

If you would like to exercise any of these rights, please contact us at info@appositelabs.co.uk. We will respond to your request within 30 days.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

6. Data Security

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Regular testing and evaluation of technical and organisational measures
• Policies and procedures for detecting, reporting, and investigating personal data breaches
• Access controls and staff training

7. International Transfers

We may transfer your personal data to countries outside the European Economic Area (EEA) for processing. When we do, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
• Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
• Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US.

8. Cookies and Similar Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. For detailed information about the cookies we use and the purposes for which we use them, see our Cookie Policy.

9. Data Protection Impact Assessments

When we introduce new technologies or processes that might impact the privacy of individuals, we conduct Data Protection Impact Assessments (DPIAs) to identify and minimise privacy risks.

10. Data Breach Procedures

In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals.

We will also notify affected individuals without undue delay when a personal data breach is likely to result in a high risk to their rights and freedoms.

11. Changes to This GDPR Compliance Statement

We may update our GDPR Compliance Statement from time to time. We will notify you of any changes by posting the new GDPR Compliance Statement on this page and updating the "Last updated" date.

You are advised to review this GDPR Compliance Statement periodically for any changes.

12. Contact Us

If you have any questions about this GDPR Compliance Statement, please contact us at:

Email: info@appositelabs.co.uk
Address: Office 9633, 321-323 High Road, Chadwell Heath, Essex, RM6 6AX, United Kingdom

You have the right to make a complaint at any time to the supervisory authority for data protection issues in your country. In the UK, this is the Information Commissioner's Office (ICO) - https://ico.org.uk.