Last updated: August 2026
Our Commitment to GDPR
cliff-civet is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains your rights under these regulations and how we uphold them.
What is UK GDPR?
The UK GDPR is the United Kingdom's data protection framework, retained from EU law following Brexit. It establishes rules for how organisations collect, process, and protect personal data, and grants individuals specific rights over their information.
Your Rights Under UK GDPR
Right to Be Informed
You have the right to know how we collect and use your personal data. Our Privacy Policy provides this information in clear, accessible language.
Right of Access
You can request a copy of the personal data we hold about you. We will respond to such requests within one month, providing the data in a commonly used electronic format where requested.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to have it corrected. We will action valid rectification requests within one month.
Right to Erasure
Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose, or when you withdraw consent.
Right to Restrict Processing
You can request that we limit how we use your data in specific situations, such as when you contest the accuracy of data or object to processing.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to have it transmitted to another controller.
Right to Object
You can object to processing of your personal data where it is based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently employ automated decision-making of this nature.
How We Protect Your Data
We implement comprehensive measures to safeguard your personal information:
- Encryption of data in transit and at rest
- Access controls limiting data to authorised personnel
- Regular security assessments and updates
- Staff training on data protection responsibilities
- Secure disposal of data when no longer required
Data Processing Activities
We maintain records of our data processing activities as required under Article 30 of UK GDPR. These records document the categories of data processed, purposes, recipients, retention periods, and security measures.
Special Category Data
Due to the nature of benefits assistance, particularly for disability-related claims, we may process special category data including health information. This processing only occurs with your explicit consent and is subject to additional safeguards.
Data Breach Procedures
We have established procedures to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
Exercising Your Rights
To exercise any of your data protection rights, please contact us by email at [email protected] or by post to our office address. We will verify your identity before processing requests and respond within one month.
There is no fee for exercising your rights in most circumstances. However, we may charge a reasonable fee for manifestly unfounded or excessive requests.
Third-Party Processors
Where we engage third parties to process personal data on our behalf, we ensure appropriate data processing agreements are in place and that processors meet UK GDPR standards.
Supervisory Authority
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
We encourage you to contact us first to resolve any concerns directly.
Updates to This Information
We review our GDPR compliance practices regularly and will update this page to reflect any changes. Please check back periodically for the latest information.