GDPR Compliance

Our Commitment to Data Protection

Polar-rain is fully committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognise the importance of protecting your personal data and are transparent about how we handle it.

Data Controller

Polar-rain acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data in accordance with applicable data protection laws.

Contact Details

Polar-rain
47 Heritage Lane
London, EC2R 8AH
United Kingdom

Email: [email protected]

Your Rights Under UK GDPR

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request, free of charge in most circumstances.

Right to Rectification

If you believe any personal data we hold is inaccurate or incomplete, you have the right to request correction. We will address valid rectification requests within one month.

Right to Erasure

Also known as the "right to be forgotten", you may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose or when you withdraw consent.

Right to Restrict Processing

You may request that we limit how we use your personal data while we investigate a complaint or verify the accuracy of your data.

Right to Data Portability

Where processing is based on consent or contract performance, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. Upon receiving a valid objection, we will cease processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have rights relating to automated decision-making, including profiling. We do not currently make decisions based solely on automated processing that produce legal effects concerning you.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contract: Processing necessary for tour bookings and service delivery
• Legitimate Interests: Improving services, security, and business operations
• Consent: Marketing communications and optional data collection
• Legal Obligation: Compliance with tax, accounting, and regulatory requirements

International Data Transfers

We primarily process data within the United Kingdom. If data transfer outside the UK becomes necessary, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office.

Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Encryption of data in transit
• Secure access controls
• Regular security assessments
• Staff training on data protection

Data Breach Procedures

In the event of a personal data breach likely to result in risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the details provided above. We may need to verify your identity before processing your request. There is no fee for most requests, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Notice

We review our GDPR compliance and this notice regularly. Any significant changes will be communicated through our website.