Policies

Privacy Policy

Gulati Bespoke respects the privacy of every client. This notice explains what personal data we collect, why we process it, how long we keep it, and the rights you hold over it.

How we collect your personal data

Most of the personal information we process is information you knowingly provide to us. In some instances we process information we are able to infer about you from other details you supply, from our interactions with you, or from personal information about you received from a third party.

How long we retain your data

We retain your personal data for as long as necessary to fulfil the purpose for which it was obtained. Retention periods are decided on the purpose of the processing, the nature of the data, and the necessity of retaining it for legal or business reasons.

Information sharing

As a general rule we do not share your personal data with anyone outside the company. We may share it with trusted third parties who perform business functions or provide services to us, such as payment gateways. All such parties are required to safeguard your data adequately and are subject to agreements containing data protection requirements consistent with applicable law.

Security measures

Your personal data is secured in accordance with our IT and security policies so that it is protected against unauthorised use or access, wrongful modification, loss or destruction. Data is stored no longer than necessary for the purpose it was obtained, or as required under applicable law, whichever is longer.

International transfers

Your information may be transferred to countries whose laws may not afford the same level of protection as your own. Where necessary, we ensure adequate safeguards are in place to comply with the requirements for international transfers of personal data under applicable privacy laws.

Your rights

  • —Withdraw your consent at any time, without affecting processing carried out before withdrawal.
  • —Request access to, and a copy of, the personal data we hold about you.
  • —Receive your data in a commonly used, machine-readable format, or have it transferred to another controller.
  • —Object to the collection, use or disclosure of your data, including processing for direct marketing.
  • —Request erasure, destruction or anonymisation of your data where we no longer have a lawful basis to hold it.
  • —Request that we suspend the use of your data while its accuracy or our grounds for processing are verified.
  • —Request that your data is corrected so it remains accurate, current, complete and not misleading.
  • —File a complaint where we or a data processor fail to comply with this notice or applicable data protection law.

These rights are limited in some situations. We may, for example, decline a request for access where it is necessary to protect the rights and freedoms of others, or refuse deletion where processing is required for compliance with a legal obligation.

Privacy enquiries

To exercise any of your rights, or for any question about this notice, please contact us and your feedback will be handled accordingly.