Last Updated: November 2024
Void-dawn is committed to full compliance with the General Data Protection Regulation and the UK Data Protection Act 2018. We recognize that protecting your personal data is both a legal obligation and a fundamental aspect of maintaining trust with our clients.
This document outlines our specific GDPR compliance measures and explains how we uphold your data protection rights.
Data Controller: Void-dawn
Address: 52 Harrington Gardens, South Kensington, London SW7 4JU, United Kingdom
Email: [email protected]
As the data controller, we determine the purposes and means of processing your personal data. We are responsible for ensuring that all processing activities comply with applicable data protection laws.
We process personal data only when we have a lawful basis to do so. The specific lawful basis depends on the purpose of processing:
Processing is necessary to fulfill our contractual obligations when you engage our financial literacy services. This includes scheduling consultations, delivering educational sessions, and providing follow-up materials.
We process certain data based on our legitimate business interests, including:
We have conducted legitimate interest assessments to ensure these interests do not override your fundamental rights and freedoms.
For certain processing activities, particularly marketing communications, we obtain your explicit consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
We process data when required by law, including compliance with financial record-keeping requirements and responding to lawful requests from authorities.
You have the right to obtain confirmation of whether we process your personal data and, if so, to access that data along with information about how it is processed. We provide one free copy of your data upon request.
If your personal data is inaccurate or incomplete, you have the right to have it corrected or completed. We will notify any third parties to whom the data was disclosed of the rectification where possible.
You can request deletion of your personal data in certain circumstances, including:
This right is not absolute. We may retain data when required by law or when we have compelling legitimate grounds.
You can request that we restrict processing of your personal data in specific situations:
Where processing is based on consent or contract and is carried out by automated means, you can receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Should this change, we will update this notice and ensure appropriate safeguards are in place.
To exercise any of your GDPR rights, submit a request to [email protected] with the subject line "GDPR Rights Request." Please include:
We will respond to your request within one month. If the request is complex or we receive multiple requests, we may extend this period by two additional months, in which case we will inform you of the extension and the reasons for it.
We do not charge a fee for processing rights requests unless the request is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee or refuse to act on the request.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that poses a risk to individuals' rights and freedoms, we will:
We implement data protection principles into our operations from the design stage and throughout the data lifecycle. This includes:
We primarily store and process data within the United Kingdom. If we transfer personal data outside the UK or European Economic Area, we ensure appropriate safeguards are in place through:
When we engage third-party service providers who process personal data on our behalf, we:
We retain personal data only as long as necessary for the purposes for which it was collected or as required by law:
After the retention period expires, we securely delete or anonymize the data.
You have the right to lodge a complaint with the supervisory authority if you believe we have violated your data protection rights.
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
We would appreciate the opportunity to address your concerns before you contact the supervisory authority, so please contact us first if possible.
We review and update this GDPR compliance statement regularly to reflect changes in our practices, technology, legal requirements, or other factors. Significant changes will be communicated through our website and, where appropriate, by direct notification to affected individuals.
For questions, concerns, or requests related to data protection and GDPR compliance, contact us at:
Email: [email protected]
Subject Line: Data Protection Inquiry
Address: 52 Harrington Gardens, South Kensington, London SW7 4JU, United Kingdom