Skip to main content

GDPR Compliance

Our commitment to data protection under the General Data Protection Regulation

1. Introduction

At Homelet Services, we are committed to protecting and respecting your privacy and complying with the General Data Protection Regulation (GDPR). This GDPR Compliance statement outlines our approach to data protection, your rights under the GDPR, and how we ensure compliance with these regulations.

The GDPR is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the export of personal data outside the EU and EEA areas.

2. Data Controller Details

Homelet Services acts as the data controller for personal information collected through our website and services. As a data controller, we determine the purposes and means of processing personal data.

Homelet Services
Greater London, United Kingdom
info@homelet-services.co.uk

3. Lawful Basis for Processing

Under the GDPR, we process your personal data based on one or more of the following lawful bases:

3.1 Consent

Where you have given clear consent for us to process your personal data for a specific purpose. For example, when you opt-in to receive marketing communications.

3.2 Contract

Where processing is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into a contract. For example, when you request a quote or book our services.

3.3 Legal Obligation

Where processing is necessary for compliance with a legal obligation to which we are subject. For example, maintaining records for tax purposes.

3.4 Legitimate Interests

Where processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms. For example, improving our services based on user feedback.

4. Your Rights Under GDPR

The GDPR provides you with several rights regarding your personal data. You have the right to:

4.1 Right to Access

You have the right to request copies of your personal data that we hold.

4.2 Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

4.3 Right to Erasure

You have the right to request that we erase your personal data, under certain conditions.

4.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

4.5 Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

4.6 Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

If you wish to exercise any of these rights, please contact us using the details provided in the "Contact Us" section. We will respond to your request within one month.

5. Data Protection Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

Encryption of personal data where appropriate
Regular testing, assessing, and evaluating the effectiveness of our security measures
Staff training on data protection and security practices
Access controls to ensure that only authorized personnel can access personal data
Regular backup procedures to prevent accidental loss of data

6. Data Breach Procedures

In the event of a personal data breach, we will notify the relevant supervisory authority without undue delay and, where feasible, not later than 72 hours after becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals.

If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

7. Data Protection Impact Assessments

Where processing operations are likely to result in a high risk to your rights and freedoms, we will conduct Data Protection Impact Assessments (DPIAs) prior to implementing new processing activities. These assessments help us identify and minimize data protection risks.

8. International Data Transfers

We may transfer your personal data to countries outside the European Economic Area (EEA). When we do, we ensure that appropriate safeguards are in place to protect your data, such as Standard Contractual Clauses approved by the European Commission, or ensuring that the recipient country has been deemed to provide an adequate level of data protection by the European Commission.

9. Data Processors

We may use third-party service providers (data processors) to process personal data on our behalf. We enter into data processing agreements with these providers to ensure they process your data in accordance with the GDPR and provide sufficient guarantees to implement appropriate technical and organizational measures.

10. Records of Processing Activities

We maintain records of our processing activities as required by the GDPR. These records include the purposes of processing, categories of personal data, categories of recipients, time limits for erasure, and a general description of technical and organizational security measures.

11. Contact Us

For any questions about our GDPR compliance or to exercise your rights under the GDPR, please contact us at:

Homelet Services
Greater London, United Kingdom
info@homelet-services.co.uk

12. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data infringes the GDPR. In the UK, the supervisory authority is the Information Commissioner's Office (ICO).

Information Commissioner's Office
https://ico.org.uk
Telephone: 0303 123 1113

Effective Date: March 21, 2025
Last Updated: March 21, 2025

Back to Home