GDPR Compliance

General Data Protection Regulation

willow-hawk is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.

Data Controller

willow-hawk acts as the data controller for personal information collected through our website and services.

Contact details:
willow-hawk
42 Sefton Park Road
Liverpool L8 3SA
United Kingdom
Email: gdpr@willow-hawk.com

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to fulfil a contract with you or take steps at your request before entering into a contract
• Legal Obligation: When we must process data to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided this does not override your rights

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data in certain circumstances, including when data is no longer necessary for the purposes for which it was collected.

Right to Restriction

You may request restriction of processing in specific situations, such as when you contest the accuracy of data.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month, though this may be extended by two additional months in complex cases.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Retention periods vary depending on the type of data and purpose of processing.

International Data Transfers

We primarily process data within the United Kingdom and European Economic Area. Any transfers outside these regions will be protected by appropriate safeguards in accordance with GDPR requirements.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

Updates to This Notice

This GDPR compliance notice may be updated periodically. Material changes will be communicated through our website.