Information on this site is advertising in nature

Last updated: January 2024

Our Commitment to Data Protection

cabulringi is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about how we handle your personal data and your rights as a data subject.

Data Controller

cabulringi acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.

Contact details:
cabulringi
47 Malone Road
Belfast BT9 6RY
Northern Ireland
Email: [email protected]

Lawful Bases for Processing

We process personal data under the following lawful bases as defined by the UK GDPR:

Article 6(1)(a) – Consent

Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving communications about our services.

Article 6(1)(b) – Contract

Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract. This applies to our advisory services.

Article 6(1)(c) – Legal Obligation

Where processing is necessary to comply with a legal obligation, such as maintaining records for accounting purposes.

Article 6(1)(f) – Legitimate Interests

Where processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights. Our legitimate interests include improving our services and website functionality.

Your Rights Under UK GDPR

As a data subject, you have the following rights:

Right to be Informed (Articles 13-14)

You have the right to know how your personal data is being collected and used. This GDPR Information page and our Privacy Policy provide this information.

Right of Access (Article 15)

You can request a copy of the personal data we hold about you. We will respond to such requests within one month and provide the information free of charge.

Right to Rectification (Article 16)

If personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected.

Right to Erasure (Article 17)

Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing (Article 18)

You can request that we limit the way we use your personal data while we investigate any concerns you have raised.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object (Article 21)

You can object to processing based on legitimate interests or for direct marketing purposes at any time.

Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] or write to us at our address above. We may need to verify your identity before processing your request.

We will respond to your request within one month. If your request is complex, we may extend this by up to two additional months, but we will inform you of any extension within the first month.

Data Protection Principles

We adhere to the data protection principles set out in Article 5 of the UK GDPR:

Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected. For client records relating to benefits applications, we typically retain information for seven years following the conclusion of our services to comply with legal and professional requirements.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

International Transfers

We primarily store and process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay where required.

Complaints

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Updates

This GDPR Information page may be updated periodically. Any significant changes will be communicated through our website.