Our commitment to protecting your data rights under UK GDPR
Last updated: January 2024
opterbruin is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our approach to data protection and your rights as a data subject.
For the personal data we collect and process in connection with our consultation services, opterbruin acts as the data controller. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that processing is carried out in compliance with data protection law.
We adhere to the following principles when processing personal data:
We rely on the following lawful bases for processing your personal data:
Processing is necessary to perform our consultation and claims assistance services as agreed with you.
Where we process special category data (such as health information relevant to disability benefit claims), we do so on the basis of your explicit consent. You may withdraw consent at any time, though this may affect our ability to continue assisting with your case.
We may process data where necessary to comply with legal obligations, such as record-keeping requirements.
We may process data based on our legitimate interests in operating and improving our services, provided these interests do not override your fundamental rights and freedoms.
Benefits and pension claims often involve special category data, particularly health information. We process this data with your explicit consent and implement additional safeguards to protect it. This information is only shared with third parties where necessary for your claim (such as the DWP or tribunals) and with your knowledge.
You have the right to request a copy of the personal data we hold about you. We will respond to such requests within one month.
You have the right to request correction of inaccurate or incomplete personal data we hold about you.
You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose. This right is not absolute and may be limited by our legal obligations to retain certain records.
You have the right to request that we restrict processing of your personal data in certain circumstances, such as while we verify accuracy following a challenge.
Where we process data based on consent or contractual necessity, you have the right to receive your data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.
To exercise any of your data protection rights, please contact us at:
opterbruin
47 Clerkenwell Road
London, EC1M 5RS
United Kingdom
Email: [email protected]
We will respond to valid requests within one month. If a request is complex or we receive numerous requests, we may extend this period by up to two months, in which case we will inform you of the extension and reasons.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office without undue delay and, where feasible, within 72 hours. Where the breach is likely to result in a high risk, we will also notify you directly.
If you are not satisfied with our response to a data protection concern, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated date.