GDPR Compliance

General Data Protection Regulation

We are committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements and your rights as a data subject.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: when you have given clear consent for us to process your personal data for a specific purpose
• Contract: when processing is necessary for a contract we have with you
• Legal obligation: when we must process your data to comply with the law
• Legitimate interests: when processing is necessary for our legitimate interests or the legitimate interests of a third party

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service if your request is clearly unfounded or excessive.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions.

Right to Object

You have the right to object to our processing of your personal data under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. When we no longer need your personal data, we will securely delete or anonymize it.

Data Security

We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. We use secure servers and encryption technologies where appropriate.

International Data Transfers

If we transfer your personal data outside of the European Economic Area, we will ensure that it is protected in a manner that is consistent with how your personal data will be protected by us in the EEA, using appropriate safeguards such as standard contractual clauses.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Exercising Your Rights

If you wish to exercise any of your rights under GDPR, please contact us using the details below. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

Right to Complain

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. However, we would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.

Contact Information

If you have any questions about our GDPR compliance or wish to exercise your rights, please contact us at:
Email: hello@pure-saga.com
Address: 47 Berwick Street, London W1F 8SJ, United Kingdom