Last updated: August 2026
Our Commitment to Data Protection
olive-prairie is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the security and privacy of your personal data seriously and have implemented appropriate measures to protect it.
Data Controller
olive-prairie acts as the data controller for personal information collected through our website and consulting services. We determine the purposes and means of processing personal data.
Contact details:
olive-prairie
Baltic Business Quarter
Gateshead Quays
Newcastle upon Tyne, NE8 3AE
Email: [email protected]
Lawful Basis for Processing
We process personal data only when we have a valid lawful basis under Article 6 of the UK GDPR:
- Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications.
- Contract (Article 6(1)(b)): Where processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
- Legal Obligation (Article 6(1)(c)): Where processing is necessary to comply with the law.
- Legitimate Interests (Article 6(1)(f)): Where processing is necessary for our legitimate interests or those of a third party, unless your rights override these interests.
Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right of Access (Article 15)
You have the right to request a copy of the personal data we hold about you. We will respond to your request within one month.
Right to Rectification (Article 16)
You have the right to request that we correct any inaccurate personal data or complete any incomplete data.
Right to Erasure (Article 17)
Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing (Article 18)
You have the right to request that we limit the way we use your personal data in certain circumstances.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object (Article 21)
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making (Article 22)
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects concerning you. We do not currently use automated decision-making processes.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or you have made numerous requests, we may extend this period by up to two additional months, and we will inform you of any such extension.
We may need to verify your identity before processing your request. This is a security measure to ensure personal data is not disclosed to any person who has no right to receive it.
Data Protection Principles
We adhere to the data protection principles set out in Article 5 of the UK GDPR:
- Lawfulness, fairness and transparency: We process data lawfully, fairly, and in a transparent manner.
- Purpose limitation: We collect data for specified, explicit, and legitimate purposes.
- Data minimisation: We ensure data is adequate, relevant, and limited to what is necessary.
- Accuracy: We keep personal data accurate and up to date.
- Storage limitation: We retain data only for as long as necessary.
- Integrity and confidentiality: We process data securely and protect against unauthorised access.
- Accountability: We take responsibility for demonstrating compliance.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
International Data Transfers
If we transfer personal data outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, such as Standard Contractual Clauses approved by the Information Commissioner's Office.
Complaints
If you are not satisfied with how we handle your personal data or have concerns about our compliance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
Updates to This Notice
We may update this GDPR compliance notice from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.