GDPR Compliance

Our Commitment to Data Protection

Jolly-orchard is committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we comply with these regulations and your rights as a data subject.

Data Controller Information

For the purposes of GDPR, Jolly-orchard acts as the data controller for personal information collected through our website and services.

Contact details:
Email: [email protected]
Address: 47 Warwick Street, London, W1B 5NF, United Kingdom

Lawful Basis for Processing

We process personal data under the following lawful bases:

Consent

When you submit contact forms, request consultations, or accept cookies, you provide explicit consent for us to process the information provided.

Contractual Necessity

Processing is necessary to fulfill service requests and respond to inquiries about our security consulting services.

Legitimate Interests

We have legitimate interests in improving our website, analyzing usage patterns, and enhancing service delivery, provided these interests do not override your fundamental rights.

Your Rights Under GDPR

Right to Access

You have the right to request access to personal data we hold about you. We will provide a copy of this information in a commonly used electronic format.

Right to Rectification

If personal data we hold is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes collected, when you withdraw consent, or when you object to processing.

Right to Restriction of Processing

You can request that we limit how we use your personal data in certain circumstances, such as when contesting data accuracy or objecting to processing.

Right to Data Portability

Where technically feasible, you have the right to receive personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

Our website does not use automated decision making or profiling that produces legal effects concerning you.

How to Exercise Your Rights

To exercise any of the rights outlined above, contact us at [email protected] with the subject line "GDPR Rights Request." Please include:

• Your full name
• Email address associated with your inquiry or service request
• Specific right you wish to exercise
• Any relevant details to help us locate your information

We will respond to verified requests within one month. In complex cases, this period may be extended by two additional months, and we will inform you of any extension.

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encryption of data in transit and at rest
• Access controls limiting who can view personal information
• Regular security assessments and updates
• Staff training on data protection principles
• Incident response procedures for potential data breaches

Data Retention

Personal data is retained only as long as necessary for the purposes collected. Specific retention periods:

• Contact form submissions: 2 years from date of inquiry
• Service engagement records: Duration of engagement plus 6 years for legal compliance
• Cookie data: As specified in our Cookies Policy

You may request earlier deletion by contacting us.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant supervisory authorities within 72 hours when the breach is likely to result in a high risk to your rights and freedoms.

Third-Party Processing

When third-party service providers process personal data on our behalf, we ensure they:

• Process data only according to our instructions
• Implement appropriate security measures
• Comply with GDPR requirements
• Have signed data processing agreements

International Data Transfers

If personal data is transferred outside the UK or European Economic Area, we ensure adequate safeguards through:

• Standard Contractual Clauses approved by regulatory authorities
• Adequacy decisions recognizing equivalent data protection standards
• Other legally approved transfer mechanisms

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority.

For the UK:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk/
Telephone: 0303 123 1113

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in regulations or our data processing practices. The updated version will be posted on this page with a revised date.