jolly-saga is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle personal data and your rights under data protection law.
Data Controller
For the purposes of data protection law, jolly-saga is the data controller responsible for the personal information we process. Our contact details are:
Address: 47 Granby Street, Leicester, LE1 6EJ, United Kingdom
Email: [email protected]
Principles of Data Processing
We adhere to the data protection principles set out in UK GDPR. Personal data we process is:
- Processed lawfully, fairly, and transparently
- Collected for specified, explicit, and legitimate purposes
- Adequate, relevant, and limited to what is necessary
- Accurate and kept up to date
- Retained only for as long as necessary
- Processed securely with appropriate protection measures
Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right to Be Informed
You have the right to know how we collect and use your personal data. This is provided through our Privacy Policy and this GDPR information page.
Right of Access
You can request a copy of the personal data we hold about you. This is commonly known as a subject access request. We will respond within one month of receiving your request.
Right to Rectification
If you believe any personal data we hold about you is inaccurate or incomplete, you can request that we correct it. We will respond to rectification requests within one month.
Right to Erasure
In certain circumstances, you can request that we delete your personal data. This right is not absolute and applies only in specific situations, such as when the data is no longer necessary for its original purpose.
Right to Restrict Processing
You can request that we limit how we use your data in certain circumstances, for example while we verify the accuracy of data you have challenged.
Right to Data Portability
Where processing is based on consent or contract, and is carried out by automated means, you can request your data in a structured, commonly used format.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.
Rights Related to Automated Decision-Making
You have rights regarding automated decision-making, including profiling. We do not currently use automated decision-making that produces legal or similarly significant effects.
Exercising Your Rights
To exercise any of your data protection rights, please contact us at [email protected]. We may need to verify your identity before processing your request.
We will respond to requests within one month. If a request is complex or we receive a high volume of requests, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons.
There is no fee to exercise your rights, although we may charge a reasonable fee if requests are manifestly unfounded or excessive.
Data Breaches
We have procedures in place to detect, report, and investigate personal data breaches. If a breach is likely to result in a high risk to your rights and freedoms, we will notify you directly.
Complaints
If you are not satisfied with how we handle your personal data or respond to your requests, you can lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
We would appreciate the opportunity to address your concerns directly before you approach the ICO.
International Transfers
We primarily process personal data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Updates
This GDPR information page was last updated in September 2026. We will update this page as needed to reflect changes in our practices or legal requirements.
This page provides general information about UK GDPR compliance. For detailed information about how we process specific categories of personal data, please refer to our Privacy Policy. Nothing on this page should be construed as legal advice.