Last updated: November 2024
Sage-pebble is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
Sage-pebble Ltd is the data controller responsible for your personal data. Our registered address is 42 Finsbury Square, London EC2A 1PX, United Kingdom.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract: Processing necessary to perform our contract with you (providing card services)
- Legal Obligation: Processing required to comply with financial regulations and anti-money laundering laws
- Legitimate Interest: Processing for fraud prevention, service improvement, and business operations
- Consent: Where you have given explicit consent for specific processing activities
Your Rights Under GDPR
You have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you. We will respond to your request within one month and provide the information free of charge.
Right to Rectification
If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond within one month.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances. Note that we may need to retain some information to comply with legal obligations.
Right to Restriction
You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis, including processing for direct marketing.
Rights Related to Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Data Transfers
When we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office.
Data Protection Officer
We have appointed a Data Protection Officer to oversee our compliance with data protection laws. You can contact our DPO at:
Email: [email protected]
Address: Data Protection Officer, 42 Finsbury Square, London EC2A 1PX
Making a Complaint
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113
Exercising Your Rights
To exercise any of these rights, please contact us at:
Email: [email protected]
Address: 42 Finsbury Square, London EC2A 1PX, United Kingdom
We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.