Your Data Rights (UK GDPR)

Controller

Responsible for data processing within the meaning of the UK GDPR is xuplin, located at 14 Hammet Street, Taunton TA1 1RN, United Kingdom. For every question about your personal data, please write to hello@xuplin.com or call us on 01823 442917.

Rights of data subjects

You have the right to obtain confirmation as to whether we process personal data about you and, if so, to receive a copy of it together with information about the purposes, the recipients and the storage period (right of access). You may ask us to correct inaccurate data and to complete incomplete data (right to rectification).

You can request the erasure of your data where it is no longer needed, where you withdraw your consent or where the processing is unlawful, and you can ask us to restrict processing while a dispute is being resolved. Where the processing is based on consent or a contract, you have the right to receive your data in a structured, machine-readable format (data portability).

Making a request

Please send your request by email to hello@xuplin.com or by post to 14 Hammet Street, Taunton TA1 1RN. To protect your data, we may ask for information that confirms your identity. You will receive an answer within one month, and no fee is charged unless a request is manifestly unfounded or excessive.

Complaints

You can lodge a complaint with the Information Commissioner's Office (ICO). Before doing so, you are welcome to contact us at hello@xuplin.com; many questions can be clarified quickly.

Objection and withdrawal of consent

Where we process your data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation; we will then stop unless there are compelling legitimate grounds. Consent you have given can be withdrawn at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Legal bases

We process personal data only where the law allows it: with your consent, to perform a contract or to take steps before entering into one, to comply with a legal obligation, or on the basis of our legitimate interest in operating a secure and functional website. Details for each processing activity can be found in our privacy policy.

International transfers

Some of our service providers may process data outside the United Kingdom. In that case we make sure that an adequate level of protection is guaranteed, for example through the UK adequacy regulations or the International Data Transfer Agreement. You can request a copy of these safeguards from us.