Last updated: January 2024
Our Commitment to Data Protection
Juniper Trail is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we uphold your data protection rights and our obligations as a data controller.
Data Controller Information
Juniper Trail acts as the data controller for personal data collected through this website and in connection with our consulting services.
Contact address:
Juniper Trail
47 Bridgewater Place
Manchester, M3 4FW
United Kingdom
Email: [email protected]
Your Data Protection Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of Access (Article 15)
You have the right to obtain confirmation as to whether we are processing your personal data and, where that is the case, access to the personal data together with certain information about how we use it.
Right to Rectification (Article 16)
You have the right to have inaccurate personal data rectified without undue delay. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed.
Right to Erasure (Article 17)
You have the right to request the erasure of your personal data in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to Restriction of Processing (Article 18)
You have the right to request restriction of processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where the processing is unlawful but you oppose erasure.
Right to Data Portability (Article 20)
Where processing is based on consent or contract, and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object (Article 21)
You have the right to object to processing of your personal data where processing is based on legitimate interests, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms.
Rights Related to Automated Decision-Making (Article 22)
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not currently engage in automated decision-making of this nature.
Exercising Your Rights
To exercise any of your data protection rights, please contact us using the details above. We will respond to your request within one month. In certain circumstances, we may extend this period by two further months where necessary, taking into account the complexity and number of requests.
We will not charge a fee for handling your request unless the request is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee or refuse to act on the request.
Lawful Basis for Processing
We process personal data on the following lawful bases:
- Consent (Article 6(1)(a)): Where you have given specific consent to the processing of your personal data for one or more specific purposes
- Contract (Article 6(1)(b)): Where processing is necessary for the performance of a contract to which you are party or to take steps at your request prior to entering into a contract
- Legitimate Interests (Article 6(1)(f)): Where processing is necessary for the purposes of our legitimate interests, except where such interests are overridden by your interests or fundamental rights and freedoms
Data Protection Principles
We adhere to the data protection principles set out in Article 5 of UK GDPR:
- Lawfulness, fairness, and transparency: Personal data is processed lawfully, fairly, and in a transparent manner
- Purpose limitation: Personal data is collected for specified, explicit, and legitimate purposes
- Data minimisation: Personal data is adequate, relevant, and limited to what is necessary
- Accuracy: Personal data is accurate and kept up to date
- Storage limitation: Personal data is kept for no longer than necessary
- Integrity and confidentiality: Personal data is processed securely
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe that we have not complied with data protection requirements:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.