Canyon Saga Ltd is committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. This page explains your rights under the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
Our Commitment
We have implemented appropriate technical and organisational measures to protect your personal data. Our data protection practices are designed to:
- Process personal data lawfully, fairly, and in a transparent manner
- Collect personal data only for specified, explicit, and legitimate purposes
- Keep personal data accurate and up to date
- Retain personal data only for as long as necessary
- Ensure appropriate security of personal data
Your Rights Under GDPR
Under data protection legislation, you have the following rights:
Right to Be Informed
You have the right to be informed about how we collect and use your personal data. This information is provided in our Privacy Policy.
Right of Access
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month of receipt.
Right to Rectification
You have the right to request that we correct any personal data that is inaccurate or incomplete. We will respond to your request within one month.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, including:
- The data is no longer necessary for the purpose it was originally collected
- You withdraw consent (where consent was the legal basis for processing)
- You object to the processing and there is no overriding legitimate interest
- The data has been unlawfully processed
- The data must be erased to comply with a legal obligation
Please note that we may need to retain certain information for legal or legitimate business purposes.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, including:
- You contest the accuracy of the personal data
- The processing is unlawful but you do not want erasure
- We no longer need the data but you need it for legal claims
- You have objected to processing pending verification of legitimate grounds
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You also have the right to request that we transfer this data directly to another organisation where technically feasible.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including:
- Processing based on legitimate interests or public interest
- Direct marketing purposes
- Processing for research or statistical purposes
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. We do not currently make automated decisions of this nature.
How to Exercise Your Rights
To exercise any of your rights, please contact us using the details below. We may need to verify your identity before processing your request.
We aim to respond to all legitimate requests within one month. If your request is particularly complex or you have made multiple requests, we may extend this by a further two months, in which case we will notify you.
Data Protection Officer
For any questions about our data protection practices or to exercise your rights, please contact:
Data Protection Officer
Canyon Saga Ltd
47 Charter Row
Sheffield, S1 4HS
Email: [email protected]
Complaints
If you are not satisfied with how we have handled your personal data or responded to your request, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
International Transfers
We primarily process your data within the United Kingdom. If we need to transfer your data outside the UK, we will ensure appropriate safeguards are in place to protect your information in accordance with data protection law.
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.