UK Data Privacy Compliance
Last updated: 2024-11-25
At 3DMA Ltd., protecting your personal data is a top priority. As a UK-based organization, we comply with the UK GDPR, Data Protection Act 2018, and other applicable privacy laws to ensure your data is processed lawfully, fairly, and transparently.
This page provides details about your rights under UK data protection laws and explains how PPCmate X manages and protects your personal information.
Key Regulations We Comply With
UK GDPR
- The UK’s version of the EU General Data Protection Regulation, which sets out principles for data processing and grants individuals enhanced privacy rights.
Data Protection Act 2018
- Supplements the UK GDPR by providing additional requirements for handling personal data, including specific provisions for children and criminal offense data.
Privacy and Electronic Communications Regulations (PECR)
- Covers rules on marketing, cookies, and other electronic communications.
Your Rights Under UK GDPR
As a user of PPCmate X, you are entitled to the following rights under UK GDPR:
1. Right to Be Informed
- You have the right to know how your personal data is collected, used, and shared. This is detailed in our Privacy Policy and Cookie Policy.
2. Right of Access
- Request a copy of the personal data we hold about you, free of charge, within one month of your request.
3. Right to Rectification
- Correct inaccurate or incomplete personal information held by us.
4. Right to Erasure (“Right to Be Forgotten”)
- Request deletion of your personal data where it is no longer needed for the purposes it was collected, subject to legal or regulatory obligations.
5. Right to Restrict Processing
- Limit the processing of your data if you contest its accuracy, object to its use, or wish to restrict it temporarily.
6. Right to Data Portability
- Receive your personal data in a commonly used, machine-readable format and transfer it to another provider.
7. Right to Object
- Object to the processing of your personal data for purposes such as direct marketing or legitimate business interests.
8. Rights Related to Automated Decision-Making
- If decisions affecting you are made solely by automated means (e.g., profiling), you have the right to request human intervention.
Categories of Personal Data We Process
We process the following categories of personal data:
- Identity Data: Name, email address, username, and other identifiers.
- Transaction Data: Details of payments and services you use.
- Technical Data: IP address, browser type, operating system, and usage logs.
- Marketing Data: Preferences for receiving promotional communications.
How We Use Your Data
Your data is collected and used for the following purposes:
- Providing, operating, and improving our services.
- Processing payments securely.
- Communicating with you about updates, features, and promotions.
- Complying with legal obligations or regulatory requirements.
Sharing Your Data
We do not sell personal data. However, we may share it with:
- Service Providers: Third-party vendors who assist in hosting, payments, analytics, and other operations.
- Authorities: Where required by law or to protect user safety.
- Business Partners: When needed to deliver the services you request.
Cookie Compliance (PECR)
Under PECR, we provide clear and accessible information about cookies used on PPCmate X and obtain your consent where necessary.
- Essential cookies are required for site functionality.
- Optional cookies (analytics, marketing) require your explicit consent, managed via our Cookie Banner.
For more details, visit our Cookie Policy.
Data Security
We implement strict security measures to safeguard your personal data:
- Encryption: Data is encrypted during storage and transmission.
- Access Control: Only authorized personnel can access sensitive data.
- Incident Response: In the event of a data breach, we notify affected users and relevant authorities promptly.
How to Exercise Your Rights
If you wish to exercise your rights under UK GDPR, please contact us:
Submit a Request:
- Email us at support@ppcmate.com with your request details.
Verification Process:
- To protect your privacy, we may require proof of identity before processing your request.
Response Time:
- We aim to respond to all requests within one month. For complex cases, this period may be extended by up to two months, and you will be informed accordingly.
Data Transfers Outside the UK
If your data is transferred outside the UK or European Economic Area (EEA), we ensure it is protected through:
- Standard Contractual Clauses (SCCs): Agreements ensuring compliance with UK GDPR.
- Adequacy Decisions: Transfers to countries recognized as providing adequate data protection.
Complaints and Supervisory Authority
If you are dissatisfied with how we handle your personal data, you can file a complaint:
- Contact Us First: We aim to resolve issues promptly.
- Contact the ICO:
- Information Commissioner’s Office (ICO)
- Website: https://ico.org.uk
- Phone: 0303 123 1113
Updates to This Compliance Policy
This page may be updated periodically to reflect changes in regulations or our practices. The latest version will always be available here, along with the effective date.
Contact Us
For inquiries about information security, please get in touch with us.