Last updated: August 2026
Our Commitment to GDPR
base-hawk is committed to protecting the privacy and security of your personal data in compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we meet our obligations under these regulations.
Data Controller
base-hawk acts as the data controller for the personal information we collect through our website and services. This means we determine the purposes and means of processing your personal data.
Contact details:
base-hawk
47 Granby Street
Leicester, LE1 6EJ
United Kingdom
Email: [email protected]
Lawful Basis for Processing
We process personal data only when we have a lawful basis to do so. Our processing activities are based on:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
- Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
- Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, unless your interests or fundamental rights override those interests.
- Legal Obligation: Where processing is necessary to comply with a legal obligation.
Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal information we hold about you. This is known as a Subject Access Request (SAR).
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit this data to another controller.
Right to Object
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
Rights Related to Automated Decision Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
Exercising Your Rights
To exercise any of your rights, please contact us using the details provided above. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
Data Security
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data where appropriate
- Regular testing and evaluation of security measures
- Staff training on data protection and security
- Access controls to limit who can access personal data
Data Breach Procedures
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay.
International Data Transfers
We primarily store and process data within the United Kingdom. If we transfer personal data outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
Data Protection Officer
For enquiries relating to this GDPR compliance statement or our data protection practices, please contact us at [email protected].
Complaints
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR compliance information from time to time to reflect changes in our practices or regulatory requirements. We encourage you to review this page periodically.