GDPR Information

Our Commitment to Data Protection

Volto Streak operates in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take your privacy seriously and are committed to transparent, lawful, and fair processing of your personal data.

This page provides specific information about your rights under these regulations and how we fulfill our obligations as a data controller.

Data Controller Information

For the purposes of UK data protection legislation, the data controller is:

Volto Streak
42 Cartwright Gardens
London WC1H 9EL
United Kingdom
Email: [email protected]

Your Rights Under UK GDPR

Right to Be Informed

You have the right to clear, transparent information about how we collect and use your personal data. Our Privacy Policy explains this in detail.

When we collect your data, we explain:

• What data we collect
• Why we collect it
• How long we keep it
• Who we share it with
• Your rights regarding your data

Right of Access

You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR).

We will provide:

• Confirmation that we process your personal data
• A copy of your personal data
• Information about how we use your data
• Details of any third parties who have access to your data

We respond to SARs within one month, free of charge. For complex requests, we may extend this by two months and will explain why.

Right to Rectification

If personal data we hold about you is inaccurate or incomplete, you can request correction. We will update our records and notify any third parties with whom we've shared the data.

Common rectification requests include:

• Correcting misspelled names
• Updating email addresses
• Amending incorrect billing information

We respond to rectification requests within one month.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances:

• The data is no longer necessary for the purpose we collected it
• You withdraw consent and we have no other legal basis for processing
• You object to processing and we have no overriding legitimate interest
• We have processed data unlawfully
• We must delete data to comply with legal obligations

We may not be able to delete data if we need it to:

• Comply with legal obligations (such as tax records)
• Establish, exercise, or defend legal claims
• Fulfill a contract with you

Right to Restrict Processing

You can request that we limit how we use your personal data while maintaining the stored information. This applies when:

• You contest the accuracy of data (restriction until we verify accuracy)
• Processing is unlawful but you don't want data deleted
• We no longer need the data but you need it for legal claims
• You've objected to processing (restriction until we verify our legitimate grounds)

During restriction, we can store data but not use it without your consent, except for legal claims or protecting others' rights.

Right to Data Portability

You can request your personal data in a structured, commonly used, machine-readable format. This allows you to transfer data to another service provider.

This right applies when:

• Processing is based on consent or contract performance
• Processing is carried out by automated means

We provide data in CSV or JSON format, typically within one month of your request.

Right to Object

You can object to processing of your personal data in certain situations:

• Direct marketing: You can object at any time, and we will stop immediately
• Processing based on legitimate interests: We will stop unless we demonstrate compelling legitimate grounds that override your interests
• Research or statistical purposes: We will stop unless processing is necessary for public interest tasks

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on you. All decisions regarding guide purchases, customer support, and refunds involve human review.

How to Exercise Your Rights

To exercise any of these rights, contact us by:

• Email: [email protected]
• Post: Volto Streak, 42 Cartwright Gardens, London WC1H 9EL, United Kingdom

Please include:

• Your full name
• Email address we have on record
• Clear description of which right you're exercising
• Any specific details relevant to your request

We may need to verify your identity before fulfilling requests. This protects your data from unauthorized access.

Our GDPR Compliance Practices

Lawful Basis for Processing

We only process personal data when we have a lawful basis:

• Consent: You've given clear permission for specific purposes
• Contract: Processing is necessary to fulfill our agreement with you
• Legal obligation: Processing is required by law
• Legitimate interests: Processing is necessary for our legitimate business interests, balanced against your rights

Data Minimization

We collect only the personal data necessary for specific purposes. We don't gather excessive information or retain data longer than required.

Accuracy

We take reasonable steps to ensure personal data is accurate and up to date. You can request corrections at any time.

Storage Limitation

We retain personal data only as long as necessary for the purposes we collected it. See our Privacy Policy for specific retention periods.

Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

Accountability

We maintain records of our processing activities and can demonstrate compliance with GDPR principles. We regularly review our practices to ensure ongoing compliance.

Data Breach Notification

In the unlikely event of a data breach that poses risks to your rights and freedoms, we will:

• Notify the Information Commissioner's Office within 72 hours of becoming aware
• Inform affected individuals without undue delay if the breach poses high risk
• Provide information about the nature of the breach and steps taken

International Transfers

When we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place:

• Transfers to countries with adequacy decisions from UK authorities
• Standard contractual clauses approved for UK GDPR compliance
• Other legally recognized transfer mechanisms

Children's Data

We do not knowingly process personal data of individuals under 16 without parental consent. Our services are not directed at children.

Questions and Complaints

If you have questions about our GDPR compliance or wish to raise a concern, contact us at [email protected].

You also have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: volto-streak.com

Updates to This Information

We review our GDPR compliance regularly and update this page when our practices change or legislation is updated. Significant changes will be communicated to customers via email.

The "Last updated" date at the top of this page indicates when changes were made.