GDPR Compliance Statement

Our Commitment to GDPR

Sienna Vale is committed to full compliance with the General Data Protection Regulation (GDPR). We respect your privacy rights and handle your personal data with care, transparency, and in accordance with UK and EU data protection laws.

Data Controller Information

Sienna Vale acts as the data controller for personal information collected through our website and services.

Contact details:
Sienna Vale
47 Redcliffe Street
Bristol BS1 6SP
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so:

• Contractual Necessity: To fulfil our obligations when you order our services
• Legitimate Interests: To improve our services, prevent fraud, and ensure website security
• Legal Compliance: To meet our legal and regulatory obligations
• Consent: Where you have provided explicit consent for specific processing activities

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You can request limitation of how we process your data in specific situations.

Right to Data Portability

You may request transfer of your personal data to another service provider in a structured, commonly used format.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with the subject line "GDPR Request". We will respond to your request within one month, as required by GDPR.

Please provide sufficient information to help us identify you and specify which right you wish to exercise.

Data Protection Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls limiting data access to authorised personnel only
• Staff training on data protection principles
• Secure data disposal procedures

Data Transfers

We primarily process and store data within the United Kingdom and European Economic Area (EEA). If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated statement on this page.

Contact the Supervisory Authority

If you are not satisfied with how we handle your data protection concerns, you may contact the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk