GDPR Compliance

Our Commitment

Rustic Moss is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our data protection responsibilities seriously and have implemented measures to ensure your personal data is handled lawfully, fairly, and transparently.

Data Controller

Rustic Moss acts as the data controller for personal information collected through this website. This means we determine the purposes and means of processing your personal data and are responsible for compliance with data protection laws.

Your Rights Under GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right to Be Informed

You have the right to know how your personal data is being used. Our Privacy Policy provides detailed information about our data processing activities.

Right of Access

You can request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to such requests within one month.

Right to Erasure

Also known as the right to be forgotten, you can request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose or you withdraw consent.

Right to Restrict Processing

You can request that we limit how we use your personal data while we investigate any concerns you have raised about accuracy or our use of your data.

Right to Data Portability

You have the right to obtain your personal data in a structured, commonly used format and transfer it to another organisation where technically feasible.

Right to Object

You can object to our processing of your personal data for direct marketing purposes at any time. We will stop processing your data for these purposes immediately upon receiving your objection.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Lawful Basis for Processing

We only process personal data when we have a lawful basis to do so. The lawful bases we rely on include:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract
• Legal obligation: Where processing is necessary for us to comply with the law
• Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party, unless your rights and interests override those interests

International Transfers

We primarily store and process your data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. In the event of a breach that poses a high risk to your rights and freedoms, we will notify you without undue delay.

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the details below. We will respond to your request within one month. In complex cases, this period may be extended by two further months, and we will inform you of any such extension.

Complaints

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). However, we would appreciate the opportunity to address your concerns directly, so please contact us first.

Contact Details

For data protection enquiries or to exercise your rights:

Rustic Moss
47 Harrington Gardens
London SW7 4JU
United Kingdom

Email: [email protected]