GDPR Compliance

Last updated: November 2024

Our Commitment to GDPR

Forest-verse is committed to complying with the General Data Protection Regulation and protecting the rights of individuals whose personal data we process. This page outlines our compliance measures and your rights under GDPR.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you voluntarily provide information through our inquiry forms
• Legitimate interests: To operate our website and provide information about our services
• Legal obligation: When required to comply with applicable laws and regulations

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to access: You can request copies of your personal data
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data in certain circumstances
• Right to restrict processing: You can request limitation of how we use your data
• Right to data portability: You can request transfer of your data to another organization
• Right to object: You can object to processing based on legitimate interests
• Rights related to automated decision-making: We do not use automated decision-making or profiling

Data Protection Officer

For questions regarding data protection or to exercise your GDPR rights, please contact our data protection team at [email protected].

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals within 72 hours of becoming aware of the breach, as required by GDPR.

International Data Transfers

We do not transfer personal data outside the European Economic Area. All data processing occurs within the UK and EU jurisdictions with appropriate safeguards in place.

Retention Periods

We retain personal data only as long as necessary for the purposes for which it was collected:

• Inquiry form submissions: 24 months from submission date
• Website analytics data: 12 months from collection
• Cookie data: As specified in our Cookies Policy

Exercising Your Rights

To exercise any of your GDPR rights, please submit a written request to [email protected]. We will respond to verified requests within one month. In complex cases, we may extend this period by an additional two months with notification.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.