GDPR Compliance

Our Commitment to GDPR

sage-ocean is committed to compliance with the General Data Protection Regulation (GDPR). This page outlines how we protect your rights and handle your personal data in accordance with GDPR requirements.

Data Controller

sage-ocean acts as the data controller for personal information collected through our website and services.

Contact details:
sage-ocean
42 Ashford Gardens
London SW14 7QR
United Kingdom
Email: [email protected]

Your Rights Under GDPR

Right to Access

You have the right to request access to the personal data we hold about you. We will provide you with a copy of your personal data in a commonly used electronic format.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it.

Right to Erasure

You have the right to request deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent on which processing is based
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased for compliance with a legal obligation

Please note that certain data may be retained where we have a legal obligation or legitimate interest to do so.

Right to Restriction of Processing

You can request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing.

Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. In the United Kingdom, the supervisory authority is:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request, though this period may be extended by two further months where necessary, taking into account the complexity and number of requests.

Data Processing Activities

Lawful Basis for Processing

We process your personal data only when we have a lawful basis to do so:

• Consent: For marketing communications and non-essential cookies
• Contract: To provide services you have requested
• Legal obligation: To comply with applicable laws
• Legitimate interests: To operate and improve our business

Data Minimization

We collect only the personal data that is necessary for the specific purposes we have identified. We do not collect excessive or irrelevant data.

Data Accuracy

We take reasonable steps to ensure personal data is accurate and up to date. You can help us maintain accuracy by informing us of any changes to your personal information.

Storage Limitation

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements.

International Data Transfers

We process and store data within the United Kingdom. If we transfer data outside the UK or European Economic Area, we ensure appropriate safeguards are in place as required by GDPR.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us immediately.

Updates to This Information

We may update this GDPR compliance information periodically. Any changes will be posted on this page with an updated revision date.

Contact Us

For questions about our GDPR compliance or to exercise your rights, please contact us at [email protected]