Our commitment to data protection and your rights
Last updated: January 2024
Scarlet Ride Limited is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we comply with these regulations and what rights you have regarding your personal data.
Scarlet Ride Limited is the data controller responsible for your personal data. Our contact details are:
Scarlet Ride Limited
47 Clerkenwell Road
London EC1M 5RS
United Kingdom
Data Protection Contact: [email protected]
We adhere to the principles set out in the UK GDPR. Personal data must be:
We process personal data only when we have a lawful basis to do so. The bases we rely on include:
Where you have given us clear consent to process your personal data for a specific purpose. You can withdraw consent at any time by contacting us.
Where processing is necessary for the performance of a contract we have with you, or to take steps at your request before entering into a contract.
Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests. Our legitimate interests include:
Where processing is necessary for us to comply with the law.
Under the UK GDPR, you have the following rights:
You have the right to be informed about how we collect and use your personal data. We provide this information through our Privacy Policy and this GDPR compliance page.
You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond to your request within one month.
You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, including when:
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
You have the right to object to the processing of your personal data where we are relying on legitimate interests as the legal basis. You also have the absolute right to object to processing for direct marketing purposes.
You have rights related to automated decision-making and profiling. We do not currently use automated decision-making that has legal or similarly significant effects on individuals.
To exercise any of your data protection rights, please contact us at:
Email: [email protected]
We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, but we will inform you if this is necessary.
We do not charge a fee for most requests. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
We use certain third-party service providers to process data on our behalf. These processors are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them. Our processors include:
When we transfer personal data outside the UK, we ensure that appropriate safeguards are in place. These safeguards may include:
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
We conduct Data Protection Impact Assessments (DPIAs) when implementing new technologies or processes that are likely to result in high risks to individuals' rights and freedoms.
We maintain records of our processing activities as required by Article 30 of the UK GDPR. These records include information about the purposes of processing, categories of data subjects, and retention periods.
All staff who handle personal data receive training on data protection principles and our internal policies. This training is updated regularly to reflect changes in legislation and best practices.
If you are not satisfied with how we have handled your personal data or responded to your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: ico.org.uk
We would appreciate the chance to address your concerns before you approach the ICO, so please contact us in the first instance.
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.
For more detailed information about how we process your personal data, please see our Privacy Policy.