GDPR Compliance

General Data Protection Regulation information

Our Commitment to GDPR

ivory-storm is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and your rights under this regulation.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you provide explicit consent for us to process your data for specific purposes
  • Contract: When processing is necessary to fulfill our service obligations to you
  • Legitimate interests: When we have a legitimate business interest that does not override your rights
  • Legal obligation: When we must process data to comply with legal requirements

Data Controller

ivory-storm acts as the data controller for the personal information collected through our website and services. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access: You can request copies of your personal data
  • Right to rectification: You can request correction of inaccurate or incomplete data
  • Right to erasure: You can request deletion of your personal data under certain circumstances
  • Right to restrict processing: You can request that we limit how we use your data
  • Right to data portability: You can request transfer of your data to another organization
  • Right to object: You can object to certain types of processing
  • Rights related to automated decision-making: You have protections against solely automated decisions that significantly affect you

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two additional months, and we will inform you accordingly.

Data Transfers

We do not transfer your personal data outside the European Economic Area. Should we need to do so in the future, we will ensure appropriate safeguards are in place to protect your data.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have violated your data protection rights. In the United Kingdom, the relevant authority is the Information Commissioner's Office (ICO).

Contact Information

For any questions about our GDPR compliance or to exercise your rights, please contact us at [email protected].