GDPR Compliance

Our Commitment

stellar-budget is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We process personal data lawfully, fairly, and transparently while respecting your privacy rights.

Data Controller

stellar-budget acts as the data controller for personal information collected through our website and service operations.

Contact details:
Email: [email protected]
Address: 42 Greenfield Lane, Bristol, BS8 2PU, United Kingdom

Your GDPR Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Access

You can request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within one month of your request.

Right to Rectification

If personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to correction requests within one month.

Right to Erasure

You may request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Erasure is required for compliance with a legal obligation

Right to Restriction of Processing

You can request that we restrict processing of your personal data when:

• You contest the accuracy of the data
• Processing is unlawful but you prefer restriction over erasure
• We no longer need the data but you require it for legal claims
• You have objected to processing pending verification of our legitimate grounds

Right to Data Portability

Where processing is based on consent or contract performance and carried out by automated means, you have the right to receive your personal data in a structured format and transmit it to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where we process data based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office if you believe your data protection rights have been violated:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: stellar-budget.com
Helpline: 0303 123 1113

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. Please provide:

• Your full name and contact information
• Details of your specific request
• Proof of identity (we may request this to verify your identity)

We will respond to your request within one month. In complex cases, we may extend this by two additional months and will inform you of the extension and reasons.

Data Processing Principles

We ensure that personal data is:

• Processed lawfully, fairly, and transparently
• Collected for specified, explicit, and legitimate purposes
• Adequate, relevant, and limited to what is necessary
• Accurate and kept up to date
• Retained only as long as necessary
• Processed securely with appropriate technical and organizational measures

Legal Basis for Processing

We process personal data under the following lawful bases:

• Consent: You have given clear consent for us to process your data for specific purposes
• Contract: Processing is necessary to fulfill a contract with you
• Legal obligation: Processing is necessary to comply with the law
• Legitimate interests: Processing is necessary for our legitimate interests, provided these do not override your rights

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection
• Incident response procedures

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the ICO within 72 hours of becoming aware of the breach, as required by UK GDPR.

International Transfers

We primarily process data within the United Kingdom. If we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Updates to This Notice

We may update this GDPR notice periodically. Significant changes will be communicated through our website or directly to you where appropriate.