Your data protection rights under UK GDPR
Last updated: January 2024
petal-otter Ltd is committed to ensuring that your personal data is processed in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about how we handle your data and your rights under these regulations.
petal-otter Ltd is the data controller for personal information collected through this website and our services. As data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection law.
Contact details:
petal-otter Ltd
71-75 Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom
Email: [email protected]
Under UK GDPR, we must have a valid lawful basis to process your personal data. The lawful bases we rely on are:
When you request a virtual property showing, we process your data as necessary to fulfil that service request. This includes your name, contact details, and property information needed to arrange and conduct the viewing.
We process certain data based on our legitimate business interests, including:
We have conducted legitimate interest assessments to ensure these interests do not override your fundamental rights and freedoms.
Where we send marketing communications or use non-essential cookies, we do so based on your explicit consent. You may withdraw consent at any time.
You have the following rights regarding your personal data:
You have the right to obtain confirmation of whether we process your personal data and to request a copy of that data. We will respond to access requests within one month.
You have the right to request correction of inaccurate personal data or completion of incomplete data we hold about you.
Also known as the "right to be forgotten", you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or you withdraw consent.
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of your data while we verify it.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making in our services.
To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases or where we receive numerous requests, this period may be extended by a further two months, in which case we will inform you.
We may need to verify your identity before processing your request. There is no fee for exercising your rights, although we may charge a reasonable fee for manifestly unfounded or excessive requests.
Where our processing activities are likely to result in high risk to individuals' rights and freedoms, we conduct Data Protection Impact Assessments (DPIAs) to identify and minimise risks.
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.
If we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place, such as:
We retain personal data only for as long as necessary for the purposes for which it was collected. Our retention periods are:
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time. We will notify you of significant changes through our website or by direct communication where appropriate.