GDPR Compliance

Our Commitment to Data Protection

frost-serval is committed to complying with the General Data Protection Regulation (GDPR) and respecting your data protection rights. This page outlines how we ensure compliance and protect your personal information.

Data Controller Information

frost-serval acts as the data controller for personal information collected through our website and services.

Contact details:
Email: [email protected]
Address: 142 Kensington High Street, London W8 7RL, United Kingdom

Lawful Basis for Processing

We process personal data only when we have a lawful basis under GDPR:

• Consent: When you voluntarily submit information through forms
• Contract: When necessary to fulfill service agreements
• Legitimate Interest: For improving services and communications with existing clients
• Legal Obligation: When required to comply with applicable laws

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You can request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within one month of your request.

Right to Rectification

If personal data we hold is inaccurate or incomplete, you have the right to have it corrected or completed.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent and no other legal basis exists for processing.

Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances, such as while we verify data accuracy.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used format and have it transmitted to another controller where technically feasible.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with your request. We will respond within one month and may require verification of your identity before processing requests.

Please provide:

• Your name and contact information
• Specific details of your request
• Any relevant account or reference numbers

Data Protection Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls limiting data access to authorized personnel
• Staff training on data protection principles
• Regular backup procedures

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.

International Data Transfers

Personal data is primarily stored and processed within the United Kingdom and European Economic Area. If data is transferred outside these regions, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Inquiry data: 2 years from last contact
• Client service records: Duration of service plus 6 years for legal compliance
• Marketing consent: Until consent is withdrawn

Children's Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children without parental consent.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR.

UK supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.

Questions and Concerns

If you have questions about our GDPR compliance or data protection practices, please contact us at [email protected]