MURAL LEAF
UK GDPR / Data Protection Policy
Our approach
Mural Leaf Limited aims to process personal data lawfully, fairly and transparently. We use personal data only for specified purposes, keep collection proportionate, aim to maintain accuracy, limit retention and apply appropriate security.
Lawful processing
Depending on the activity, our lawful basis may include taking steps at your request before a contract, performance of a contract, compliance with a legal obligation, or legitimate interests such as responding to business enquiries and protecting the website. Consent is used where the law specifically requires it.
Individual rights
You may ask us for access to personal data we hold about you, correction of inaccurate information, erasure where applicable, restriction of processing, objection to certain processing, or portability where the legal conditions are met. We may need to verify identity before acting on a request.
Requests and retention
Send data-protection requests to info@muralleaf.co.uk. We aim to respond within the time limits required by applicable law. Retention periods are set according to the purpose of the information, contractual or legal requirements, and the need to establish or defend legal claims.
Security, breaches and processors
We take proportionate steps to protect information and expect processors acting for us to provide appropriate safeguards. Suspected personal-data breaches are assessed and, where required, notified to the ICO and affected individuals within applicable legal timeframes.
International processing
If a supplier processes personal data outside the UK, we will review the transfer mechanism and safeguards required by UK data-protection law.