Our commitment to data protection under the General Data Protection Regulation.
Last updated: January 2024
sienna-meadow is committed to ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle personal data in accordance with these regulations.
sienna-meadow acts as the data controller for personal information collected through this website and in the course of providing our services. As data controller, we determine the purposes and means of processing personal data.
Contact details:
sienna-meadow
47 Meridian Business Park
Leicester, LE19 1WZ
United Kingdom
Email: [email protected]
We adhere to the following principles when processing personal data:
We rely on the following lawful bases for processing personal data:
Processing necessary for the performance of a contract with you, or to take steps at your request before entering into a contract. This includes processing enquiries and delivering inventory services.
Processing necessary for our legitimate interests, provided these do not override your fundamental rights. Our legitimate interests include operating and improving our business and website.
Where required, we obtain your explicit consent before processing. You may withdraw consent at any time by contacting us.
Processing necessary to comply with a legal obligation, such as tax or accounting requirements.
Under the UK GDPR, you have the following rights:
You can request a copy of the personal data we hold about you. We will respond within one month of receiving your request.
You can request correction of any inaccurate or incomplete personal data we hold about you.
You can request deletion of your personal data where there is no compelling reason for its continued processing.
You can request that we limit how we use your data in certain circumstances.
You can request that we transfer your data to another organisation or directly to you in a structured, commonly used format.
You can object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision making.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex, we may extend this period by a further two months, but we will inform you of any extension within the initial month.
We may need to verify your identity before processing your request. There is no fee for exercising your rights, unless your request is manifestly unfounded or excessive.
We primarily store and process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authorities.
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
If you are dissatisfied with how we handle your personal data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time. The date at the top of this page indicates when it was last revised. Continued use of our website and services after changes indicates acceptance of the updated terms.