GDPR Compliance

Overview

Pearl Ridge Climate Systems is committed to compliance with the UK General Data Protection Regulation and Data Protection Act 2018. This page outlines how we meet our obligations as a data controller.

Data Controller

Pearl Ridge Climate Systems acts as the data controller for personal information collected through our website and business operations.

Contact details:
Unit 14 Riverside Business Park
Oakfield Road
Maidstone, Kent ME16 8QN
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you submit contact forms or accept cookie usage
• Contract: When processing is necessary to fulfill service agreements
• Legal obligation: When required to comply with UK law
• Legitimate interests: For business operations, fraud prevention, and service improvement where not overridden by your rights

Your GDPR Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate personal data we hold about you.

Right to Erasure

You may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes it was collected.

Right to Restriction of Processing

You may request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You may request transfer of data you provided to us in a structured, commonly used, machine-readable format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects concerning you.

Exercising Your Rights

To exercise any of these rights, send a written request to [email protected]. We will respond within one month of receiving your request. In complex cases, we may extend this period by two additional months and will inform you of the extension.

We may request additional information to verify your identity before processing requests.

Data Security

We implement appropriate technical and organizational security measures to protect personal data, including:

• Encrypted data transmission using SSL/TLS protocols
• Access controls limiting data access to authorized personnel
• Regular security assessments and updates
• Secure backup procedures

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office within 72 hours of becoming aware of the breach.

Third-Party Processors

When we engage third-party processors, we ensure they provide sufficient guarantees of GDPR compliance through written contracts that specify data processing terms.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Specific retention periods are outlined in our Privacy Policy.

International Data Transfers

If personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Complaints

If you believe we have not handled your personal data in accordance with UK GDPR, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk

Policy Updates

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revision date.