01 Our commitment
T1 Global processes personal data in line with the UK GDPR, the Data Protection Act 2018, and — for individuals based in the European Economic Area — the EU GDPR. This page works alongside our Privacy Policy and focuses specifically on the rights GDPR gives you and how we honour them.
02 Data controller details
For the purposes of GDPR, the data controller is:
- T1 Global
- 3b Whiteleys Parade, Uxbridge Road, Hillingdon, Middlesex, UB10 0PD, United Kingdom
- +44 (0)207 993 6286
- privacy@t1-global.com
03 Lawful basis for processing
Every processing activity we carry out is mapped to one of the lawful bases GDPR permits — most commonly legitimate interests (for enquiry handling and site security), contract (for client engagements), consent (for optional communications) or legal obligation (for statutory record-keeping). Details for a specific processing activity are available on request.
04 Your rights under GDPR
If UK or EU GDPR applies to you, you have the following rights in relation to your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate or incomplete data
- Right to erasure — ask us to delete your data, where there's no compelling reason for us to keep it
- Right to restrict processing — ask us to pause processing while a dispute or correction is resolved
- Right to data portability — receive your data in a structured, commonly-used, machine-readable format
- Right to object — object to processing based on legitimate interests, including direct marketing
- Rights related to automated decision-making — we don't currently make any decisions about individuals using solely automated means with legal or similarly significant effect; if this changes, you'll have the right not to be subject to such a decision without human review
05 How to exercise your rights
Email privacy@t1-global.com with your request and enough detail for us to locate your records — typically your name and the email address you've used with us. There's no charge for a standard request, though we may ask for identity verification for anything involving sensitive data.
06 Response timeframes
We respond to rights requests within one calendar month of receipt, as required by GDPR. For complex or numerous requests, this can be extended by a further two months — if that applies, we'll explain why within the first month.
07 International transfers & safeguards
Where personal data is transferred outside the UK or EEA — for example, to a service provider in another jurisdiction — we ensure an appropriate safeguard is in place first, such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or reliance on an adequacy decision covering that country.
08 Data protection contact
Questions about our data protection practices, or requests relating to this page, can be directed to our data protection contact at privacy@t1-global.com or by post to the address listed above, marked "Data Protection."
09 Right to lodge a complaint
If you believe we've mishandled your personal data, we'd ask that you raise it with us directly first so we can put it right. You also have the right to lodge a complaint with a supervisory authority — in the UK, this is the Information Commissioner's Office (ICO), reachable at ico.org.uk. If you're based in the EEA, you can complain to your local data protection authority instead.
10 Data breach notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of it, and will contact affected individuals directly where the risk is high, in line with our obligations under GDPR.