GDPR Compliance

Last updated: 1 November 2024

Our Commitment to Data Protection

Star-saga is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our responsibilities regarding data protection seriously and have implemented appropriate measures to ensure that personal data is processed lawfully, fairly, and transparently.

Data Controller

For the purposes of the UK GDPR, Star-saga is the data controller for personal data collected through this website and in connection with our services.

Contact details:

Star-saga
27 Pemberton Street
London, EC2A 4NE
United Kingdom

Email: [email protected]

Lawful Basis for Processing

We process personal data on the following lawful bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract to which you are a party
• Legal obligation: Where processing is necessary for compliance with a legal obligation to which we are subject
• Legitimate interests: Where processing is necessary for the purposes of legitimate interests pursued by us, except where such interests are overridden by your interests or fundamental rights and freedoms

Types of Personal Data Processed

We may process the following categories of personal data:

• Identity data: Name, title
• Contact data: Email address, postal address
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Usage data: Information about how you use our website and services
• Financial data: Bank statement information provided voluntarily for our analysis services

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

Right to be Informed

You have the right to be informed about the collection and use of your personal data. This privacy information explains what data we collect, the purposes for processing, how long we retain it, and who we share it with.

Right of Access

You have the right to access your personal data and supplementary information. This allows you to be aware of and verify the lawfulness of the processing. To make a subject access request, please contact us at [email protected].

Right to Rectification

You have the right to have inaccurate personal data rectified or completed if it is incomplete. If we have disclosed the personal data in question to third parties, we will inform them of the rectification where possible.

Right to Erasure

You have the right to request the deletion or removal of personal data where there is no compelling reason for its continued processing. This right is not absolute and only applies in certain circumstances.

Right to Restrict Processing

You have the right to request the restriction or suppression of your personal data. When processing is restricted, we are permitted to store the personal data but not further process it.

Right to Data Portability

You have the right to obtain and reuse your personal data for your own purposes across different services. This allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way.

Right to Object

You have the right to object to processing based on legitimate interests, direct marketing, and processing for purposes of scientific or historical research and statistics.

Rights Related to Automated Decision Making

We do not carry out any automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

The retention period depends on the type of data and the purpose of processing. Client financial data provided for analysis purposes is retained for a maximum of 12 months following the completion of services, after which it is securely deleted.

International Transfers

We do not transfer personal data outside the United Kingdom or European Economic Area. All data processing activities take place within the UK.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorised way. We limit access to your personal data to those employees and third parties who have a business need to know.

Data Breach Notification

In the event of a personal data breach, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to individuals' rights and freedoms. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Complaints

If you wish to make a complaint about how we process your personal data, please contact us in the first instance at [email protected] and we will endeavour to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: ico.org.uk

Changes to This GDPR Information

We may update this GDPR compliance information from time to time. We will notify you of any changes by posting the new information on this page and updating the "Last updated" date.