GDPR Data Protection

Data controller

Carnovate, 147 New Road, Dagenham, RM10 9LU, England, is the data controller for personal data processed through this website. Contact: support@carnovate.co.uk.

Lawful bases for processing

We process personal data under the following bases:

• Contract — to generate and deliver the reports you purchase
• Legitimate interests — to secure our service and prevent fraud
• Legal obligation — to meet accounting and regulatory requirements
• Consent — for optional communications and non-essential cookies

Your rights under UK GDPR

You may exercise any of the following rights at any time, free of charge:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your personal data
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests

How to exercise your rights

Email support@carnovate.co.uk with your request. We respond to all valid requests within one calendar month. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Data security

Personal data is encrypted in transit, access is restricted to authorised personnel, and our systems are regularly reviewed to ensure appropriate technical and organisational safeguards remain in place.