Our commitment to data protection under UK GDPR
Last updated: January 2024
mountain-kudu is committed to ensuring the security and protection of the personal information that we process, and to providing a compliant and consistent approach to data protection. We have implemented a data protection programme to ensure we meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
mountain-kudu acts as the Data Controller for personal data collected through our website and in the provision of our fuel analysis services. As Data Controller, we determine the purposes and means of processing personal data.
Contact details:
mountain-kudu
47 Whitmore Street
London, EC2A 4NR
United Kingdom
Email: [email protected]
We process personal data in accordance with the following principles:
We only process personal data where we have a lawful basis to do so. The lawful bases we rely on include:
Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications or submitting a service enquiry.
Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, such as providing our fuel analysis services.
Where processing is necessary to comply with a legal obligation, such as maintaining financial records for tax purposes.
Where processing is necessary for our legitimate interests or those of a third party, provided these interests do not override your fundamental rights. Our legitimate interests include operating and improving our business, providing customer service, and preventing fraud.
Under UK GDPR, you have the following rights regarding your personal data:
You have the right to request copies of your personal data. We may charge a small fee for this service if the request is manifestly unfounded or excessive.
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
You have the right to request that we erase your personal data, under certain conditions such as when the data is no longer necessary for the purpose it was collected.
You have the right to request that we restrict the processing of your personal data, under certain conditions.
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
You have the right to object to our processing of your personal data, under certain conditions, particularly where we process data based on legitimate interests or for direct marketing.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or you have made multiple requests, we may extend this period by a further two months, but we will inform you of this within the initial one month period.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data or to exercise any of your other rights.
We have implemented appropriate technical and organisational measures to protect personal data, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place. These may include standard contractual clauses approved by the Information Commissioner, or transfers to countries that have been deemed to provide an adequate level of protection for personal data.
Given the scale and nature of our data processing activities, we have not appointed a dedicated Data Protection Officer. However, our management team is responsible for overseeing compliance with data protection requirements. For any data protection queries, please contact us at [email protected].
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this information periodically to stay informed about how we protect your data.