GDPR Compliance

Our Commitment to GDPR

coral-meadow is committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines your rights under these regulations and how we ensure compliance.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: Processing necessary for the performance of a contract, such as arranging your travel bookings
• Legitimate Interest: Processing necessary for our legitimate business interests, provided these do not override your rights
• Legal Obligation: Processing necessary to comply with legal requirements
• Consent: Where you have given explicit consent for specific processing activities, such as marketing communications

Your Rights Under GDPR

The GDPR provides you with the following rights regarding your personal data:

Right to Be Informed

You have the right to be informed about how we collect and use your personal data. Our Privacy Policy provides this information in detail.

Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request. We will respond to your request within one month.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. Please contact us to update your information.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected, or when you withdraw consent.

Right to Restrict Processing

You have the right to request that we limit how we use your data in certain situations, such as while we verify the accuracy of data you have disputed.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit it to another organisation where technically feasible.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that have legal or similarly significant effects. We do not currently use automated decision-making processes.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us using the following details:

coral-meadow
47 Victoria Street
Belfast, BT1 3GH
Northern Ireland

Email: [email protected]

We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.

Data Protection Officer

For data protection enquiries or concerns, please contact our Data Protection Officer at the address above or via email.

Supervisory Authority

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF

Website: ico.org.uk

International Data Transfers

When we transfer personal data outside the UK or European Economic Area, we ensure appropriate safeguards are in place. These may include:

• Transfers to countries with adequate data protection laws as recognised by the UK government
• Standard contractual clauses approved by the relevant authorities
• Binding corporate rules for transfers within corporate groups

Data Security Measures

We implement appropriate technical and organisational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Access controls limiting who can view personal data
• Regular security assessments and updates
• Staff training on data protection practices
• Secure disposal of data when no longer needed

Updates to This Information

We may update this GDPR information from time to time to reflect changes in law or our practices. Please check this page periodically for updates.