GDPR Information

Your data protection rights under the General Data Protection Regulation

Our Commitment to GDPR Compliance

frostbite-hollow is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page provides detailed information about your rights, how we process your data, and how you can exercise control over your personal information.

Data Controller Information

Data Controller: frostbite-hollow
Address: 42 Kensington Gardens, Brighton, East Sussex, BN1 4AL, United Kingdom
Contact Email: [email protected]

Your GDPR Rights Explained

1. Right to Be Informed

You have the right to be informed about the collection and use of your personal data. We provide this information through our Privacy Policy and this GDPR page, explaining what data we collect, why we collect it, how we use it, and who we share it with.

2. Right of Access

You have the right to request access to your personal data. This allows you to receive a copy of the personal data we hold about you and verify that we are processing it lawfully.

How to request: Email [email protected] with the subject line "Data Access Request"

Response time: Within 30 days of receiving your request

3. Right to Rectification

You have the right to request correction of incomplete or inaccurate personal data we hold about you. We will take reasonable steps to ensure your data is accurate and up to date.

How to request: Email [email protected] with details of the corrections needed

4. Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances, including:

  • The data is no longer necessary for the purpose it was collected
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • The data must be erased to comply with a legal obligation

How to request: Email [email protected] with the subject line "Data Erasure Request"

5. Right to Restrict Processing

You have the right to request restriction of processing your personal data in certain situations:

  • You contest the accuracy of your personal data
  • Processing is unlawful but you oppose erasure
  • We no longer need the data but you require it for legal claims
  • You have objected to processing pending verification of legitimate grounds

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.

This right applies when:

  • Processing is based on consent or contract
  • Processing is carried out by automated means

7. Right to Object

You have the right to object to processing of your personal data in certain circumstances:

  • Processing based on legitimate interests
  • Direct marketing communications
  • Processing for scientific or historical research purposes

Direct Marketing: You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails or emailing [email protected]

8. Rights Related to Automated Decision Making and Profiling

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

Our Practice: We do not engage in automated decision-making or profiling activities that produce legal effects or significantly affect you.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us using one of the following methods:

  • Email: [email protected]
  • Postal Mail: 42 Kensington Gardens, Brighton, East Sussex, BN1 4AL, United Kingdom

When submitting a request, please include:

  • Your full name
  • Email address associated with our services
  • Description of your request
  • Proof of identity (if requested for security purposes)

Response Timeline

We will respond to your request within 30 days of receipt. In complex cases, we may extend this period by an additional 60 days, and we will inform you of such extension within the initial 30-day period.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the relevant supervisory authority:

UK Supervisory Authority:
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113

Data Protection Principles

We adhere to the following GDPR data protection principles:

  • Lawfulness, Fairness, and Transparency: We process data lawfully, fairly, and transparently
  • Purpose Limitation: We collect data for specified, explicit, and legitimate purposes
  • Data Minimization: We collect only data that is adequate, relevant, and limited to what is necessary
  • Accuracy: We keep data accurate and up to date
  • Storage Limitation: We retain data only as long as necessary
  • Integrity and Confidentiality: We process data securely and protect against unauthorized access
  • Accountability: We demonstrate compliance with these principles

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also report the breach to the relevant supervisory authority within 72 hours of becoming aware of it.

Updates to This Information

We may update this GDPR information page from time to time to reflect changes in our practices or legal requirements. The current version will always be available on our website.