GDPR Compliance

maple-hub is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we uphold your data protection rights and our obligations as a data controller.

Our Role as Data Controller

maple-hub acts as the data controller for personal information collected through our website and in the course of providing our tour services. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection legislation.

Data Protection Principles

We adhere to the following principles when processing personal data:

• Lawfulness, fairness, and transparency: We process data lawfully and openly, informing you about how your data is used.
• Purpose limitation: We collect data for specified, explicit purposes and do not process it in ways incompatible with those purposes.
• Data minimisation: We collect only the data necessary for the stated purposes.
• Accuracy: We take reasonable steps to ensure personal data is accurate and up to date.
• Storage limitation: We retain data only for as long as necessary.
• Integrity and confidentiality: We implement appropriate security measures to protect personal data.
• Accountability: We demonstrate compliance with these principles.

Your Rights Under GDPR

The UK GDPR provides you with the following rights regarding your personal data:

Right to Be Informed

You have the right to know how your personal data is collected and used. Our Privacy Policy provides this information in detail.

Right of Access

You may request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to have it corrected. We will respond to rectification requests within one month.

Right to Erasure

In certain circumstances, you may request that we delete your personal data. This right applies when the data is no longer necessary for the purpose it was collected, when you withdraw consent, or when processing is unlawful.

Right to Restrict Processing

You may request that we limit how we use your data in certain circumstances, such as when you contest its accuracy or object to processing.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have rights related to automated decision-making and profiling. We do not currently use automated decision-making that produces legal or similarly significant effects.

Exercising Your Rights

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before processing your request. We will respond to valid requests within one month, though this period may be extended by two months for complex requests.

Data Breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in high risk, we will also inform affected individuals without undue delay.

International Transfers

We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Supervisory Authority

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Contact Us

For data protection enquiries or to exercise your rights:

maple-hub
47 Ecclesall Road
Sheffield, S11 8PR
United Kingdom

Email: [email protected]

Last updated: January 2024