Last updated: January 2024
Our Commitment to GDPR
Royal Lagoon is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains your rights under these regulations and how we uphold them.
Data Controller
Royal Lagoon acts as the data controller for personal information collected through this website and our chauffeur services. We determine the purposes and means of processing your personal data.
Your Data Protection Rights
Right to Access
You have the right to request a copy of the personal data we hold about you. We will respond to such requests within one month and provide the information free of charge in most circumstances.
Right to Rectification
If the personal data we hold is inaccurate or incomplete, you have the right to request correction. We will make necessary amendments promptly upon receiving your request.
Right to Erasure
You may request the deletion of your personal data when:
- The data is no longer necessary for its original purpose
- You withdraw consent (where consent was the legal basis)
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restrict Processing
You can request limitation of processing in certain circumstances, such as when you contest the accuracy of the data or have objected to processing pending verification of legitimate grounds.
Right to Data Portability
Where we process data based on consent or contract, and processing is automated, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.
Rights Related to Automated Decision-Making
We do not currently make decisions based solely on automated processing, including profiling, that produce legal effects concerning you.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Consent: When you submit enquiry forms or opt into communications
- Contractual Necessity: To provide chauffeur services you have booked
- Legitimate Interests: To improve our services and maintain security
- Legal Obligation: To comply with applicable laws and regulations
Data Protection Measures
We implement appropriate technical and organisational measures including:
- Secure data storage and transmission
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
- Data minimisation practices
International Transfers
We primarily process data within the United Kingdom. If data transfer outside the UK is necessary, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Data Breach Procedures
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and communicate with affected individuals as required.
Exercising Your Rights
To exercise any of your rights, please contact us:
Email: [email protected]
Address: 17 Belgrave Square, London SW1X 8PG
We may need to verify your identity before processing your request. There is no fee for exercising your rights in most cases.
Complaints
If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Helpline: 0303 123 1113