Your data protection rights under UK GDPR
crisp-zone is the data controller responsible for your personal information. Our registered address is 147 Buchanan Street, Glasgow G1 2JX, United Kingdom.
We process your personal data under the following legal bases:
When you engage our services, we process your information to fulfil our contractual obligations to provide benefits guidance and application support.
We process certain data based on legitimate interests, such as improving our services, preventing fraud, and maintaining website security.
We may process your data to comply with legal requirements, including record-keeping obligations for legal practices and cooperation with government agencies in benefits administration.
Where required by law, we obtain your explicit consent before processing sensitive personal data or using cookies beyond strictly necessary functions.
You have specific rights regarding your personal data:
You can request a copy of the personal information we hold about you. We will provide this within one month of your request, free of charge in most circumstances.
If your personal information is inaccurate or incomplete, you have the right to request correction. We will update our records promptly upon verification of the correct information.
Under certain circumstances, you can request deletion of your personal data. This right is not absolute and may be limited by our legal obligations to retain records.
You may request that we limit how we use your data while we verify its accuracy or assess whether our legitimate interests override your rights.
Where technically feasible, you can request your data in a structured, commonly used format for transfer to another service provider.
You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.
We process your personal data in accordance with the following principles:
We process data lawfully, fairly, and in a transparent manner. We clearly explain why we collect information and how we use it.
We collect personal data for specified, explicit, and legitimate purposes. We do not process data in ways incompatible with these purposes.
We collect only the personal information necessary for providing our services and fulfilling legal obligations. We do not request excessive or irrelevant data.
We take reasonable steps to ensure personal data is accurate and current. We encourage you to inform us of any changes to your information.
We retain personal data only as long as necessary for the purposes collected or as required by law. Consultation records are typically kept for seven years.
We implement appropriate security measures to protect personal data against unauthorised access, accidental loss, or destruction.
We do not transfer personal data outside the United Kingdom. Should this become necessary, we will ensure appropriate safeguards are in place and inform you accordingly.
In the event of a data breach likely to result in high risk to your rights and freedoms, we will notify you without undue delay and report the breach to the Information Commissioner's Office within 72 hours of becoming aware.
Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, contact us immediately for deletion.
To exercise any of your data protection rights, contact us at [email protected] with specific details of your request. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office if you believe we have not handled your data appropriately.
For GDPR-related enquiries or to exercise your rights:
Email: [email protected]
Address: 147 Buchanan Street, Glasgow G1 2JX, United Kingdom
We may update this GDPR compliance notice to reflect changes in our practices or legal requirements. Updated versions will be posted on this page with the revision date clearly indicated.