GDPR Information

Data Controller

For the purposes of data protection legislation, the data controller is:

hyper-brook
42 Charlotte Square
Edinburgh
EH2 4HQ
United Kingdom

Categories of Personal Data

We process the following categories of personal data:

• Identity data: full name
• Contact data: email address
• Enquiry data: service preferences, property requirements, messages
• Technical data: cookie consent preferences stored locally

Lawful Basis for Processing

We process personal data under the following lawful bases as defined by UK GDPR:

Contractual Necessity

Processing is necessary to perform services you have requested or to take steps at your request before entering into a service agreement.

Legitimate Interests

Processing is necessary for our legitimate business interests, specifically:

• Maintaining records of client enquiries and communications
• Improving service quality through enquiry analysis
• Protecting our legal interests

Consent

Where we rely on consent, you have the right to withdraw it at any time by contacting us.

Data Subject Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of Access

You have the right to obtain confirmation that we process your personal data and to request a copy of that data.

Right to Rectification

You have the right to request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure

You have the right to request deletion of your personal data where:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restriction

You have the right to request restriction of processing where:

• You contest the accuracy of the personal data
• Processing is unlawful but you oppose erasure
• We no longer need the data but you require it for legal claims
• You have objected to processing pending verification of legitimate grounds

Right to Data Portability

You have the right to receive personal data you provided to us in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.

Right to Object

You have the right to object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with:

• Your full name and contact details
• Details of the specific right you wish to exercise
• Any relevant reference numbers or dates of communication

We will respond to your request within one month, though this may be extended by two months for complex requests. We will inform you of any extension within the initial month.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: ico.org.uk

International Transfers

We do not transfer personal data outside the United Kingdom. Should this change, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Automated Decision Making

We do not use automated decision making or profiling in relation to your personal data.