Our commitment to data protection regulations
spracsmozz is committed to complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we fulfil our obligations under these regulations.
spracsmozz acts as the data controller for personal data collected through our website and services. We are responsible for determining the purposes and means of processing personal data.
Contact details:
spracsmozz
47 Westbourne Grove
London W2 4UA
United Kingdom
Email: [email protected]
We adhere to the core principles of data protection:
We process data lawfully and transparently, providing clear information about how we use your data through this policy and our privacy policy.
We collect data only for specified, explicit, and legitimate purposes. We do not process data in ways that are incompatible with those purposes without obtaining additional consent.
We collect only the data that is necessary for the purposes we have specified. We regularly review our data collection practices to ensure compliance.
We take reasonable steps to ensure personal data is accurate and kept up to date. You can request correction of inaccurate data at any time.
We retain personal data only for as long as necessary. Our retention schedule is based on legal requirements and business necessity.
We implement appropriate security measures to protect personal data against unauthorised processing, accidental loss, destruction, or damage.
As a data subject, you have the following rights:
You can request a copy of the personal data we hold about you. We will respond within one month of receiving your request.
You can request that we correct any inaccurate personal data or complete any incomplete data we hold about you.
In certain circumstances, you can request that we delete your personal data. This right is not absolute and depends on the legal basis for processing.
You can request that we limit how we use your data while we address any concerns you have raised about its accuracy or our use of it.
Where processing is based on consent or contract, you can request your data in a structured, commonly used, machine-readable format.
You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling grounds to continue.
We do not make decisions based solely on automated processing that produce legal effects concerning you.
To exercise any of your rights, please contact us at [email protected]. We may need to verify your identity before processing your request.
We will respond to all legitimate requests within one month. If your request is complex or we receive multiple requests, we may extend this period by up to two months, in which case we will notify you.
We have procedures in place to detect, investigate, and report personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Last updated: August 2026