Your data rights

Who is responsible

The controller responsible for the processing of your personal data on headluma.com is headluma, 14 Wind Street Yard, Swansea SA1 1DP, United Kingdom. You can reach us by email at [email protected] or by telephone on 01792 410286. Requests concerning your data can be sent to this address at any time.

How to exercise your rights

To exercise any of these rights, a short message to [email protected] is sufficient. We may ask you to confirm your identity so that no one else can obtain your data. We respond within one month of receiving your request; in complex cases this period can be extended by two further months, and we will tell you if it is. Exercising your rights is free of charge.

Your rights

You have the right to obtain confirmation as to whether we process personal data about you and, if so, to receive a copy of it together with information about the purposes, the recipients and the storage period (right of access). You may ask us to correct inaccurate data and to complete incomplete data (right to rectification).

Data that is no longer required, that was processed unlawfully or that you no longer consent to us using will be deleted on request (erasure); instead of deletion you can ask for processing to be restricted. You can also have the data you provided to us transferred to you or to another controller in a common electronic format (portability).

Right to lodge a complaint

You can lodge a complaint with the Information Commissioner's Office (ICO). Before doing so, you are welcome to contact us at [email protected]; many questions can be clarified quickly.

Why we may process data

We process personal data only where the law allows it: with your consent, to perform a contract or to take steps before entering into one, to comply with a legal obligation, or on the basis of our legitimate interest in operating a secure and functional website. Details for each processing activity can be found in our privacy policy.

Your right to object

Where we process your data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation; we will then stop unless there are compelling legitimate grounds. Consent you have given can be withdrawn at any time, without affecting the lawfulness of processing carried out before the withdrawal.

International transfers

Some of our service providers may process data outside the United Kingdom. In that case we make sure that an adequate level of protection is guaranteed, for example through the UK adequacy regulations or the International Data Transfer Agreement. You can request a copy of these safeguards from us.