Last updated: January 2024
Cloud-soar is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle personal data in accordance with these regulations.
Cloud-soar acts as the data controller for personal data collected through our website and services. As the data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection law.
Contact details:
Cloud-soar
47 Whitebridge Lane
Birmingham B15 2TH
United Kingdom
We adhere to the following data protection principles:
We rely on the following lawful bases for processing personal data:
Processing your data is necessary to provide the services you have requested, including fuel analysis reports and consultations.
We may process data based on our legitimate business interests, such as improving our services and communicating relevant information to clients. We conduct legitimate interest assessments to balance our interests against your rights.
Where required, we obtain your explicit consent before processing personal data. You may withdraw consent at any time.
We process data where necessary to comply with legal obligations, such as tax and accounting requirements.
As a data subject, you have the following rights:
You have the right to obtain confirmation of whether we process your personal data and to access that data. We will provide a copy of your data free of charge within one month of your request.
You have the right to have inaccurate personal data corrected or incomplete data completed.
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose.
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
You have the right to object to processing based on legitimate interests or direct marketing at any time.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise any of your rights, please contact us using the details above. We will respond to your request within one month. This period may be extended by two further months for complex requests, in which case we will inform you of the extension.
We may need to verify your identity before processing your request. If your request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on it.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
Where we transfer personal data outside the United Kingdom, we ensure that appropriate safeguards are in place, such as:
We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in high risks to data subjects. This helps us identify and minimise data protection risks.
We maintain records of our processing activities as required by Article 30 of the UK GDPR. These records include the purposes of processing, categories of data subjects and personal data, recipients, and retention periods.
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We review and update this GDPR compliance information regularly to ensure it reflects our current practices and any changes in data protection law.