teal-aurora is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we meet our obligations under these regulations.
Data Controller
teal-aurora acts as the data controller for personal information collected through our website and in the course of providing our heritage consultancy services. As data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection principles.
Data Protection Principles
We adhere to the following principles when processing personal data:
- Lawfulness, fairness, and transparency: We process data lawfully and inform individuals about how their data is used
- Purpose limitation: We collect data for specified, explicit purposes and do not process it in ways incompatible with those purposes
- Data minimisation: We collect only the data necessary for our stated purposes
- Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date
- Storage limitation: We retain data only for as long as necessary
- Integrity and confidentiality: We implement appropriate security measures to protect personal data
- Accountability: We can demonstrate compliance with these principles
Lawful Bases for Processing
We rely on the following lawful bases for processing personal data:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
- Legitimate interests: Where processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights
- Legal obligation: Where processing is necessary to comply with a legal requirement
Your Rights Under GDPR
The UK GDPR provides you with specific rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you
- Right to rectification: You may request correction of inaccurate or incomplete data
- Right to erasure: You may request deletion of your personal data in certain circumstances
- Right to restrict processing: You may request that we limit how we use your data
- Right to data portability: You may request transfer of your data to another organisation
- Right to object: You may object to processing based on legitimate interests or for direct marketing
- Rights related to automated decision-making: You have rights regarding automated decisions that significantly affect you
Exercising Your Rights
To exercise any of these rights, please contact us using the details below. We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, in which case we will inform you accordingly.
We will not charge a fee to handle your request unless the request is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee or refuse to act on the request.
Data Breach Procedures
We maintain procedures for detecting, reporting, and investigating personal data breaches. Where a breach is likely to result in a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to affected individuals, we will also notify those individuals directly.
International Data Transfers
We primarily process personal data within the United Kingdom. Should we transfer data internationally, we will ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or binding corporate rules.
Supervisory Authority
The supervisory authority for data protection in the United Kingdom is the Information Commissioner's Office (ICO). You have the right to lodge a complaint with the ICO if you believe your data protection rights have been infringed:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Contact for Data Protection Matters
For any questions regarding data protection or to exercise your rights, please contact:
teal-aurora
27 Heritage Lane
Westminster, London SW1A 2HQ
[email protected]
Last updated: September 2026