Last updated: September 2024
Our Commitment to GDPR
rain-trail is committed to protecting personal data and complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we fulfil our obligations as a data controller.
Data Controller Information
rain-trail acts as the data controller for personal information collected through this website and our property consultancy services. Our registered office is located at 47 Berkeley Square, Mayfair, London W1J 5AU.
Lawful Basis for Processing
We process personal data under the following lawful bases:
Consent
When you submit an enquiry form, you consent to us processing your information to respond to your request. Consent may be withdrawn at any time by contacting us.
Contractual Necessity
Where we provide services, processing personal data is necessary to fulfil our contractual obligations to you.
Legitimate Interests
We may process data based on legitimate business interests, provided these do not override your fundamental rights and freedoms. This includes improving our services and website functionality.
Your Data Rights Under GDPR
Right of Access
You may request a copy of personal data we hold about you. We will respond to such requests within one month.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure
In certain circumstances, you may request deletion of your personal data. This right is not absolute and may be subject to legal retention requirements.
Right to Restriction
You may request that we restrict processing of your data in specific circumstances, such as when accuracy is contested.
Right to Portability
Where technically feasible, you may request your data in a structured, machine-readable format for transfer to another controller.
Right to Object
You may object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling grounds.
Data Protection Measures
We implement appropriate technical and organisational measures including:
- Secure storage of electronic and physical records
- Access controls limiting data availability to authorised personnel
- Regular review of data protection practices
- Staff training on data protection requirements
International Transfers
We do not routinely transfer personal data outside the United Kingdom. Where international transfer becomes necessary, appropriate safeguards will be implemented in accordance with applicable regulations.
Data Breach Procedures
In the event of a personal data breach posing risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Affected individuals will be notified where the breach presents high risk.
Exercising Your Rights
To exercise any of your data rights, please contact us at [email protected]. We may request verification of your identity before processing requests. There is no fee for most requests, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
Supervisory Authority
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.