GDPR Compliance

Our Commitment to Data Protection

We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

brisk-forest acts as the data controller for personal information collected through our website and services. We determine how and why your personal data is processed.

Contact: info@brisk-forest.com

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity: To provide the services you have requested
• Legitimate interests: To improve our services and communicate relevant information
• Consent: For marketing communications, which you can withdraw at any time
• Legal obligations: To comply with applicable laws and regulations

Your GDPR Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. This is known as a Data Subject Access Request (DSAR).

Right to Rectification

You can request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You can request that we limit how we use your personal data in certain situations.

Right to Data Portability

You can request that we provide your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to processing of your personal data in certain circumstances, particularly for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at info@brisk-forest.com. We will respond to your request within one month, though this may be extended by two months in complex cases.

We may need to verify your identity before processing your request to ensure we are disclosing or modifying information to the correct person.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

• Contact inquiries: Up to 2 years
• Client session records: Up to 6 years (in line with standard financial record-keeping practices)
• Marketing communications: Until you unsubscribe or request deletion

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. This includes:

• Secure storage systems with restricted access
• Encryption of sensitive data
• Regular security assessments
• Staff training on data protection

International Data Transfers

Your personal data is processed and stored within the United Kingdom. If we need to transfer data outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Complaints

If you believe we have not handled your personal data in accordance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

Updates to This Notice

We may update this GDPR notice from time to time. Any changes will be posted on this page with an updated date. Significant changes will be communicated directly to you where appropriate.