Our Commitment to Data Protection
scartwurst is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we meet our obligations and your rights regarding personal data.
Data Controller
scartwurst acts as the data controller for personal information collected through our website and services. We determine how and why your personal data is processed.
Contact details:
scartwurst
42 Castle Street
Liverpool, L2 7LA
[email protected]
Principles We Follow
In accordance with UK GDPR, we ensure that personal data is:
- Processed lawfully, fairly, and transparently: We inform you about how we use your data and only process it where we have a valid legal basis.
- Collected for specified, explicit, and legitimate purposes: We only collect data necessary for providing our advisory services and website functionality.
- Adequate, relevant, and limited: We minimise the data we collect to what is necessary for the stated purposes.
- Accurate and kept up to date: We take reasonable steps to ensure personal data remains accurate and correct inaccuracies promptly.
- Retained only as long as necessary: We delete or anonymise personal data when it is no longer needed.
- Processed securely: We implement appropriate measures to protect against unauthorised access, loss, or damage.
Lawful Bases for Processing
We process personal data under the following lawful bases:
Contractual Necessity
Processing required to fulfil our service agreement with you, including preparing benefit applications, conducting consultations, and managing your case.
Consent
Where we rely on consent, you have provided clear, affirmative agreement. This applies to marketing communications and certain data sharing with third parties. You may withdraw consent at any time.
Legitimate Interests
Processing necessary for our legitimate business interests, provided these do not override your rights. Examples include website analytics and service improvements.
Legal Obligation
Processing required to comply with applicable laws, such as record-keeping requirements and regulatory reporting.
Special Category Data
Some of our services involve processing special category data, particularly health information for disability benefit applications. We process this data only with your explicit consent or where necessary for legal claims.
Your Individual Rights
Under UK GDPR, you have the following rights:
Right of Access
You may request a copy of the personal data we hold about you. We will respond within one month of receiving your request.
Right to Rectification
You may request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure
In certain circumstances, you may request deletion of your personal data. This right does not apply where we have legal obligations to retain data.
Right to Restrict Processing
You may request that we limit how we use your data while issues are resolved.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
Right to Object
You may object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds.
Rights Related to Automated Decision-Making
We do not make automated decisions with legal or significant effects without human involvement.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. There is no fee for most requests, but we may charge a reasonable fee for manifestly unfounded or excessive requests.
Data Breach Procedures
We maintain procedures to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
www.ico.org.uk
Updates
We review our data protection practices regularly and may update this page accordingly. Significant changes will be communicated through our website.