Summary: If you are in the UK or EEA, you have strong rights over your personal data. We are committed to honouring those rights promptly and transparently.
1. Who This Applies To
This page provides additional information for users in the United Kingdom and European Economic Area (EEA), where the UK GDPR and EU GDPR apply respectively. It supplements our Privacy Policy.
2. Lawful Basis for Processing
We process your personal data on the following lawful bases:
- Contract performance: To deliver the Service you signed up for.
- Legitimate interests: To prevent fraud, improve the platform, and send relevant transactional communications.
- Legal obligation: Where we are required by law to retain or process data.
- Consent: For optional communications such as marketing emails. You may withdraw consent at any time.
3. Your Rights
Under UK/EU GDPR, you have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
- Right to restrict processing: Request that we limit how we use your data in certain circumstances.
- Right to data portability: Receive a copy of your data in a machine-readable format.
- Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
- Rights related to automated decision-making: We do not make solely automated decisions with significant legal effects on individuals.
4. How to Exercise Your Rights
To exercise any of the above rights, please contact our support team with the subject line "Data Rights Request". We will respond within 30 days. We may need to verify your identity before processing the request.
5. Data Transfers
Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
6. Data Protection Officer
We have designated a Data Protection Officer. Contact them at: dpo@workmere.com.
7. Right to Lodge a Complaint
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the relevant supervisory authority:
- UK: Information Commissioner's Office (ICO) — ico.org.uk
- EEA: Your national Data Protection Authority