GDPR Compliance

General Data Protection Regulation

Meta-trek is committed to full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our compliance measures and your rights under these regulations.

Data Controller

Meta-trek is the data controller responsible for your personal data. Our contact details are:

Meta-trek
47 Kensington Court
London W8 5DA
United Kingdom
Email: [email protected]

Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

1. Right to be Informed

You have the right to know how we collect, use, and share your personal data. This information is provided in our Privacy Policy and through our transparent communication practices.

2. Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request." We will provide this information free of charge within one month of your request.

3. Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. We will respond to your request within one month.

4. Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, including:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent on which processing is based
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

5. Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer this data directly to another organization where technically feasible.

7. Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis. You also have an absolute right to object to processing for direct marketing purposes.

8. Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produces legal or similarly significant effects. Meta-trek does not engage in automated decision-making or profiling.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. Please include:

• Your full name and contact details
• Details of your request
• Any relevant reference numbers or dates of service
• Proof of identity (we may request this to protect your data)

We will respond to all requests within one month, though this may be extended to two months in complex cases. We will inform you if an extension is necessary.

Lawful Basis for Processing

We process your personal data based on the following lawful bases:

• Contract: Processing necessary to perform our services under contract with you
• Consent: Where you have given explicit consent for specific processing activities
• Legitimate interests: Processing necessary for our business operations, provided this does not override your rights
• Legal obligation: Processing required to comply with legal requirements

Data Protection Principles

We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency in processing
• Purpose limitation: collecting data for specific, explicit purposes
• Data minimization: collecting only what is necessary
• Accuracy: keeping data accurate and up to date
• Storage limitation: retaining data only as long as necessary
• Integrity and confidentiality: securing data appropriately
• Accountability: demonstrating compliance with these principles

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encryption of personal data in transit and at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication systems
• Staff training on data protection and security
• Incident response procedures for data breaches
• Regular backup and disaster recovery procedures

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the Information Commissioner's Office within 72 hours of becoming aware of the breach
• Notify affected individuals without undue delay if the breach poses a high risk
• Provide information about the nature of the breach and steps taken to address it

Third-Party Processing

When we engage third parties to process personal data on our behalf, we ensure:

• Appropriate data processing agreements are in place
• Third parties provide sufficient guarantees of data security
• Processing is conducted in accordance with our instructions
• Regular audits and assessments of third-party compliance

International Data Transfers

If we transfer your personal data outside the United Kingdom, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by UK authorities
• Adequacy decisions recognizing equivalent protection in the destination country
• Other legally approved transfer mechanisms

Children's Data

We do not knowingly process personal data of individuals under 18 years of age. If we become aware that we have collected such data, we will take steps to delete it promptly.

Complaints

If you have concerns about our data protection practices, please contact us first at [email protected]. We will investigate and respond to your concern.

You also have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk

Updates to GDPR Compliance

We regularly review our data protection practices to ensure ongoing compliance with UK GDPR. This page was last updated on September 29, 2026.