GDPR Compliance

Our Commitment to Data Protection

node-gorge is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our responsibilities regarding your personal data seriously and have implemented appropriate measures to ensure compliance.

Data Controller Information

node-gorge acts as the data controller for personal data collected through this website and our services.

Contact: [email protected]
Address: 42 Castle Street, Liverpool L2 7LA, United Kingdom

Your Rights Under UK GDPR

Right to Be Informed

You have the right to be informed about how we collect and use your personal data. This information is provided through our Privacy Policy and this GDPR page.

Right of Access

You have the right to request access to the personal data we hold about you. This is commonly known as a "subject access request". We will respond to valid requests within one month.

Right to Rectification

You have the right to request that we correct any inaccurate personal data we hold about you. We aim to process such requests promptly.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, including:

• When the data is no longer necessary for its original purpose
• When you withdraw consent (where consent was the basis for processing)
• When you object to processing and there are no overriding legitimate grounds

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in automated decision-making.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.

We may need to verify your identity before processing your request to ensure the security of your personal data.

Data Protection Principles

We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency: We process data lawfully, fairly, and in a transparent manner
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes
• Data minimisation: We ensure data is adequate, relevant, and limited to what is necessary
• Accuracy: We keep data accurate and up to date
• Storage limitation: We retain data only as long as necessary
• Integrity and confidentiality: We process data securely

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to you, we will also notify you directly.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom

Website: ico.org.uk

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.