GDPR Compliance

Last Updated: May 22, 2026

Our Commitment to Data Protection

acute-certificate is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we fulfill our obligations and protect your rights.

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract Performance: Processing necessary to fulfill our service agreements with you
  • Legitimate Interests: Operating our business, improving services, and communicating about our offerings
  • Consent: When you've given explicit permission for specific processing activities
  • Legal Obligation: Compliance with applicable laws and regulations

Your GDPR Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information within one month of your request.

Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction or completion.

Right to Erasure

You can request deletion of your personal data in certain circumstances, such as when it's no longer necessary for the purposes it was collected.

Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transfer it to another service provider.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

  • Email: [email protected]
  • Post: Data Protection Officer, acute-certificate, 127 Culinary Lane, Kensington District, London W8 4PL, United Kingdom

We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two additional months.

Data Protection Principles

We adhere to the following data protection principles:

  • Lawfulness, Fairness, and Transparency: We process data lawfully and communicate clearly about our practices
  • Purpose Limitation: We collect data for specified, explicit purposes and don't use it for incompatible purposes
  • Data Minimization: We only collect data that's necessary for our purposes
  • Accuracy: We take steps to ensure personal data is accurate and up-to-date
  • Storage Limitation: We don't keep data longer than necessary
  • Integrity and Confidentiality: We implement appropriate security measures
  • Accountability: We're responsible for demonstrating compliance

Data Security Measures

We implement appropriate technical and organizational measures including:

  • Encryption of data in transit and at rest
  • Access controls and authentication
  • Regular security assessments
  • Staff training on data protection
  • Incident response procedures

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach.

Third-Party Processors

When we use third-party service providers, we ensure they:

  • Provide sufficient guarantees of data protection
  • Process data only on our instructions
  • Maintain appropriate security measures
  • Have data processing agreements in place

International Transfers

If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses
  • Adequacy decisions
  • Binding corporate rules

Complaints

If you believe we've mishandled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
ico.org.uk

Contact Our Data Protection Officer

For any questions about our GDPR compliance or data protection practices:

Email: [email protected]