About GDPR
The General Data Protection Regulation (GDPR), as incorporated into UK law following Brexit (known as UK GDPR), provides individuals with enhanced rights regarding their personal data. Mesa Quartz Ltd is committed to complying with these regulations and protecting your privacy.
Our Commitment
We are committed to:
- Processing personal data lawfully, fairly, and transparently
- Collecting data only for specified, explicit, and legitimate purposes
- Ensuring data is adequate, relevant, and limited to what is necessary
- Keeping data accurate and up to date
- Retaining data only as long as necessary
- Processing data securely
Your Rights Under UK GDPR
As a data subject, you have the following rights:
Right to Be Informed
You have the right to know how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR page.
Right of Access
You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request". We will respond to such requests within one month.
Right to Rectification
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. We will respond within one month.
Right to Erasure
Also known as the "right to be forgotten", you can request that we delete your personal data in certain circumstances, including:
- The data is no longer necessary for its original purpose
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restrict Processing
You can request that we limit how we use your data while we address concerns you have raised about its accuracy or our use of it.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to processing based on legitimate interests, direct marketing, and processing for research or statistical purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making.
Data Controller
Mesa Quartz Ltd is the data controller responsible for your personal data. Our contact details are:
Mesa Quartz Ltd
47 Harbour Lane
Bristol BS1 4TR
United Kingdom
Email: [email protected]
How to Exercise Your Rights
To exercise any of your rights, please contact us using the details above. When making a request, please provide:
- Your full name
- Your email address (the one associated with your account or enquiry)
- Details of your request
- Any information that will help us identify the data you are enquiring about
We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests.
Complaints
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Changes to This Information
We may update this GDPR information page from time to time. Any changes will be posted here with an updated date. We encourage you to review this page periodically.