Statutory Governance

Privacy Policy

Vaultsbreezyrank Highlands Exploration Ltd is committed to maintaining transparent data processing standards in compliance with the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

1. Data Controller Identification

The designated Data Controller for all operational information gathered through Vaultsbreezyrank.bond is:

Vaultsbreezyrank Highlands Exploration Ltd
Company Registration Number: SC689241
Registered Office: 14 Balnakiel Terrace, Durness, Lairg, Sutherland, IV27 4PZ, Scotland, UK
Data Protection Officer Contact: [email protected]

2. Personal Data We Collect

We process limited personal data solely where necessary to deliver geographic publishing services, respond to user inquiries, and maintain site performance. Categories of collected information include:

  • Contact Submissions: Your name, email address, inquiry topic, and message content when submitting our field inquiry form.
  • Technical Telemetry: Anonymized IP addresses, browser agent headers, screen resolution dimensions, referring URLs, and operating system types recorded in standard server access logs.
  • Preference State: Local storage flags recording consent selections for site cookies.

3. Lawful Basis for Processing

Under Article 6 of the UK GDPR, our processing activities rely upon specific lawful bases:

  • Consent (Article 6(1)(a)): Applicable when you freely consent to non-essential analytic cookies or provide direct details via inquiry forms.
  • Legitimate Interests (Article 6(1)(f)): Necessary to protect the security and availability of our web server infrastructure and counter malicious intrusion attempts.
  • Legal Obligation (Article 6(1)(c)): Applicable where financial or legal records must be retained pursuant to UK corporate reporting acts.

4. Third-Party Processors and International Transfers

We do not sell, rent, or lease personal identifiers to third-party data brokers. Infrastructure processors utilized for hosting and communication are bounded by strict Data Processing Agreements (DPAs) requiring adherence to UK International Data Transfer Addendums (IDTA).

5. Data Retention Periods

Personal contact communications are retained within secure email archives for twenty-four (24) months following resolution of the query, after which records are permanently purged. Server security logs containing truncated IP addresses are retained on an automated 30-day rolling rotation cycle.

6. Your Statutory Rights (UK GDPR & CCPA)

Depending upon your jurisdiction, you enjoy enforceable statutory rights regarding your personal information:

  • Right of Access: Request a complete copy of all personal records we hold concerning you.
  • Right to Rectification: Request correction of inaccurate, outdated, or incomplete information.
  • Right to Erasure ("Right to be Forgotten"): Demand deletion of your records where ongoing storage lacks a legal basis.
  • Right to Restrict Processing: Request temporary cessation of data processing during dispute verification.
  • Right to Object: Oppose processing activities conducted under legitimate interests grounds.

To exercise any statutory right, contact our Data Protection Officer at [email protected]. We process requests within 30 calendar days without administrative fees.

7. Supervisory Authority Oversight

You have the right to lodge a complaint with the UK supervisory authority: Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF (ico.org.uk).