Introduction

Rare Cognition Ltd is committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Union and the United Kingdom.

This page outlines how we comply with GDPR requirements and explains your rights under this regulation.

Legal Basis for Processing

We process your personal data under the following legal bases:

Consent

We may process your data based on your explicit consent, which you can withdraw at any time.

Contractual Necessity

We process data necessary to fulfill our contractual obligations when you engage our services.

Legitimate Interests

We may process data based on our legitimate business interests, such as improving our services and preventing fraud, provided these interests do not override your rights.

Legal Obligation

We process data when required to comply with legal obligations.

Your Rights Under GDPR

Right to Access

You have the right to request access to the personal data we hold about you. We will provide you with a copy of your data in a commonly used electronic format.

Right to Rectification

You can request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances.

Right to Restriction of Processing

You can request that we limit how we use your personal data in certain situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You can object to our processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects concerning you.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us:

  • Email: [email protected]
  • Subject line: "GDPR Request - [Your Right]"
  • Include your full name and contact details

We will respond to your request within one month, though this may be extended by two additional months for complex requests.

Data Protection Officer

For questions about our data protection practices or GDPR compliance, contact our Data Protection Officer:

Email: [email protected]
Address: Data Protection Officer, Rare Cognition Ltd, 42 Kingsway, London WC2B 6EX, United Kingdom

Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of personal data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication procedures
  • Staff training on data protection
  • Incident response procedures

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach.

International Data Transfers

We primarily store and process data within the UK and EU. If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions
  • Binding Corporate Rules

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Duration of our business relationship
  • Legal or regulatory requirements
  • Legitimate business purposes

After this period, we securely delete or anonymize your personal data.

Third-Party Processors

We only work with third-party processors who provide sufficient guarantees of GDPR compliance. All processors are bound by data processing agreements that ensure appropriate safeguards.

Complaints

If you believe we have not complied with GDPR, you have the right to lodge a complaint with a supervisory authority:

UK: Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113

EU: Your local Data Protection Authority

Updates to GDPR Compliance

We regularly review and update our GDPR compliance measures. Any material changes will be communicated through our website and, where appropriate, directly to affected individuals.

Contact Information

For any questions about our GDPR compliance:

Rare Cognition Ltd
42 Kingsway
London WC2B 6EX
United Kingdom
Email: [email protected]