GDPR Compliance Statement

ULIST LTD is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This statement outlines our approach to data protection and your rights under the regulation.

1. Our Commitment

ULIST LTD processes personal data in accordance with UK GDPR principles. We ensure that personal data is:

• Processed lawfully, fairly, and transparently.
• Collected only for specified, legitimate purposes.
• Adequate, relevant, and limited to what is necessary.
• Accurate and kept up to date.
• Retained only for as long as necessary.
• Processed securely with appropriate technical and organisational measures.

2. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contract: Processing necessary to provide our services to registered users and business owners.
• Legitimate Interests: Platform security, analytics, and service improvement.
• Consent: Where you have provided explicit consent for specific processing activities.
• Legal Obligation: Where we are required to retain data by law.

3. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data.
• Right to Erasure: You can request that we delete your personal data, subject to legal retention obligations.
• Right to Data Portability: You can receive your data in a structured, machine-readable format and transmit it to another controller.
• Right to Restrict Processing: You can request that we limit processing in certain circumstances.
• Right to Object: You can object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

4. How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please submit your request in writing to:

Email: support@ulistguides.com

We will respond to your request within one month of receipt, as required by UK GDPR. In complex cases, this period may be extended by two further months, and we will inform you of the extension within the initial one-month period.

5. Data Breach Response

In the event of a personal data breach, ULIST LTD will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, where it poses a risk to the rights and freedoms of individuals. Affected individuals will be notified without undue delay where the breach is likely to result in a high risk.

6. Contact

If you have any questions about our GDPR compliance or wish to exercise your rights, please contact us:

Email: support@ulistguides.com
Registered Office: [Registered office address to be supplied]