GDPR Compliance

Our Commitment to GDPR

We are committed to complying with the General Data Protection Regulation (GDPR) and protecting the personal data of individuals in the European Economic Area (EEA) and the United Kingdom. This page outlines how we fulfill our obligations under GDPR and respect your data protection rights.

Data Controller Information

For the purposes of GDPR, the data controller is:

indivunifa
45 Wellington Street
Leeds LS1 4JL
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process your personal data only when we have a lawful basis to do so under GDPR Article 6:

Consent (Article 6(1)(a))

When you submit a contact form or request our services, you provide explicit consent for us to process your personal data for the purposes stated at the point of collection.

Contractual Necessity (Article 6(1)(b))

Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, such as providing property search services you have requested.

Legal Obligation (Article 6(1)(c))

We may process your data to comply with legal obligations, such as tax reporting or responding to lawful requests from authorities.

Legitimate Interests (Article 6(1)(f))

We may process your data based on our legitimate interests in operating our business, improving our services, and communicating with clients, provided these interests do not override your fundamental rights and freedoms.

Your Rights Under GDPR

As a data subject, you have the following rights under GDPR:

Right to Access (Article 15)

You have the right to request confirmation of whether we process your personal data and to receive a copy of that data along with information about how it is processed.

Right to Rectification (Article 16)

You may request correction of inaccurate personal data and completion of incomplete data we hold about you.

Right to Erasure (Article 17)

Under certain circumstances, you have the right to request deletion of your personal data, including when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Erasure is required to comply with a legal obligation

Right to Restriction of Processing (Article 18)

You may request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object (Article 21)

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. We do not currently engage in automated decision-making.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with the subject line "GDPR Request" and specify which right you wish to exercise.

We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months, and we will inform you of any such extension.

We may request specific information from you to confirm your identity before processing your request. This is a security measure to ensure personal data is not disclosed to unauthorized persons.

Data We Collect

We collect and process the following categories of personal data:

• Identity Data: Full name
• Contact Data: Email address, postal address
• Technical Data: IP address, browser type, device information
• Usage Data: Information about how you use our website
• Preference Data: Property search criteria, service preferences

How Long We Retain Your Data

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

Typical retention periods:

• Inquiry Data: 12 months from last contact if no service engagement occurs
• Client Data: 6 years following completion of services for legal and accounting purposes
• Marketing Communications: Until you unsubscribe or withdraw consent
• Website Analytics: 26 months

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Pseudonymization and encryption of personal data
• Ongoing confidentiality, integrity, availability, and resilience of processing systems
• Regular testing and evaluation of security measures
• Processes for restoring availability and access to data in the event of incidents

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33.

International Data Transfers

When we transfer personal data outside the EEA or UK, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions confirming the recipient country provides adequate data protection
• Other legally recognized transfer mechanisms

Third-Party Processing

We only engage third-party processors who provide sufficient guarantees to implement appropriate technical and organizational measures to ensure GDPR compliance. All processors are bound by data processing agreements that meet GDPR requirements.

Children's Data

We do not knowingly process personal data of children under 16 years of age. If we become aware that we have collected data from a child without appropriate parental consent, we will take steps to delete that information.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority.

For the UK, the supervisory authority is:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113

Updates to This Policy

We may update this GDPR compliance page to reflect changes in our practices or legal requirements. Material changes will be communicated through our website or directly to affected individuals where appropriate.

Contact Us

For questions about GDPR compliance or to exercise your data protection rights, please contact us:

Email: [email protected]
Address: 45 Wellington Street, Leeds LS1 4JL, United Kingdom