GDPR Compliance

Our Commitment to Data Protection

Frostwick Quarters Ltd operates in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our responsibilities as a data controller seriously and have implemented comprehensive measures to protect the personal information you entrust to us.

What is GDPR?

The General Data Protection Regulation establishes rules for how organisations must handle personal data. It gives individuals significant rights over their information and places obligations on organisations that collect and process data. Following Brexit, the UK adopted its own version (UK GDPR) which maintains equivalent protections.

Your Rights Under GDPR

Data protection law provides you with powerful rights regarding your personal information:

Right to Be Informed

You have the right to know how your data is being used. Our Privacy Policy provides detailed information about our data processing activities, and we are transparent about what information we collect and why.

Right of Access

You can request a copy of all personal data we hold about you. This is known as a Subject Access Request (SAR). We will provide this information free of charge within one month of receiving your request.

Right to Rectification

If any information we hold about you is inaccurate or incomplete, you have the right to have it corrected. Simply contact us with the details that need updating.

Right to Erasure

Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances. This includes when the data is no longer necessary for its original purpose or when you withdraw consent.

Right to Restrict Processing

You can ask us to limit how we use your data in specific situations, such as when you contest the accuracy of the data or object to our processing.

Right to Data Portability

Where technically feasible, you can receive your data in a structured, commonly used format and transmit it to another organisation.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have rights regarding automated decisions that significantly affect you. We do not currently use automated decision-making in our services.

How We Protect Your Data

We have implemented multiple safeguards to ensure your information remains secure:

• Data minimisation: We only collect information necessary for providing our services
• Purpose limitation: We use data only for specified, explicit purposes
• Storage limitation: We retain data only as long as necessary
• Integrity and confidentiality: We maintain appropriate security measures
• Accountability: We document our processing activities and can demonstrate compliance

Lawful Basis for Processing

We process personal data under several lawful bases depending on the context:

• Contractual necessity: Processing required to deliver services you have requested
• Legal obligation: Processing required by law, such as health and safety records
• Legitimate interests: Processing for business purposes where your rights do not override
• Consent: Processing where you have given specific, informed consent

Special Category Data

Some information we collect constitutes special category data under GDPR, including health information necessary for safe training. We process this data under explicit consent and the legitimate activities of a sport or fitness organisation.

Data Processors

We work with third-party service providers who process data on our behalf. These processors are bound by data processing agreements ensuring they handle your information appropriately and only for specified purposes.

International Data Transfers

Where we transfer data outside the UK, we ensure adequate protections are in place through:

• Adequacy decisions recognising equivalent protection
• Standard contractual clauses approved by the ICO
• Binding corporate rules where applicable

Data Breach Procedures

We maintain procedures for detecting, reporting, and investigating personal data breaches. Where a breach is likely to result in risk to your rights and freedoms, we will notify you without undue delay and report to the ICO within 72 hours.

Exercising Your Rights

To exercise any of your GDPR rights, contact us using the details below. We may need to verify your identity before processing your request. There is no fee for most requests, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

Contact Our Data Protection Lead

For any questions about GDPR compliance or to exercise your rights:

Data Protection Enquiries
Frostwick Quarters Ltd
47 Bridgewater Street
Manchester M3 4NQ
[email protected]

Supervisory Authority

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
ico.org.uk

Updates to This Information

We review our GDPR compliance regularly and may update this page to reflect changes in our practices or legal requirements. Significant changes will be communicated to clients directly.