GDPR Compliance

cannagimka is committed to compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines our approach to data protection and your rights under these regulations.

Our Role as Data Controller

For the purposes of data protection legislation, cannagimka acts as the data controller for personal information collected through our website and consultancy services. We determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection requirements.

Principles We Follow

We adhere to the core principles of data protection:

• Lawfulness, fairness, and transparency: We process data lawfully and are open about how we use it
• Purpose limitation: We collect data for specified, explicit purposes and do not process it incompatibly with those purposes
• Data minimisation: We only collect data that is necessary for the purposes we have identified
• Accuracy: We take reasonable steps to ensure personal data is accurate and up to date
• Storage limitation: We keep data only for as long as necessary
• Integrity and confidentiality: We protect data using appropriate security measures

Your Data Protection Rights

Under the GDPR and UK data protection law, you have the following rights:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will respond to valid requests within one month.

Right to Rectification

If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

In certain circumstances, you can request that we delete your personal data. This right is not absolute and may be subject to legal retention requirements.

Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances, such as while we verify accuracy or consider an objection.

Right to Data Portability

Where we process data based on your consent or for a contract, you have the right to receive your data in a structured, commonly used format.

Right to Object

You can object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the details below. We may need to verify your identity before processing your request. Requests are typically handled without charge, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.

International Transfers

We do not routinely transfer personal data outside the United Kingdom. Should any transfer be necessary, we ensure appropriate safeguards are in place in accordance with data protection requirements.

Contact Information

For any questions about our GDPR compliance or to exercise your data protection rights:

cannagimka
47 Castle Street
Sheffield, S3 8LN
Email: [email protected]

Supervisory Authority

If you are not satisfied with our response to a data protection concern, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk

Last updated: January 2024