Our commitment to data protection
reshoscard is committed to compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we fulfil our obligations under these regulations.
For the purposes of data protection law, reshoscard acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data.
We process personal data only where we have a lawful basis to do so. The legal bases we rely upon include:
The GDPR provides you with specific rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.
If personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected.
You may request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.
You may request that we limit how we use your data while a complaint or concern is being resolved.
Where processing is based on consent or contract, you have the right to receive your personal data in a structured, commonly used format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
To exercise any of these rights, please contact us at [email protected]. We may ask you to verify your identity before processing your request. We will respond to valid requests within one month, though this period may be extended by up to two months for complex requests.
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures are reviewed regularly to ensure ongoing security.
If we transfer personal data outside the UK or European Economic Area, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection law.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights, we will also notify you directly.
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). You can contact the ICO at ico.org.uk or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
For questions about this GDPR information or our data protection practices, contact us at [email protected] or write to 47 Kensington High Street, London, W8 5ED, United Kingdom.