onerarinas is committed to protecting and respecting your privacy. This page outlines how we comply with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, and explains your rights regarding your personal data.
Data Controller
onerarinas is the data controller responsible for your personal data. We determine the purposes and means of processing personal data collected through our website and services.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
- Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests
- Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject
Your Rights Under GDPR
Under the GDPR and UK data protection law, you have the following rights:
Right of Access
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.
Right to Rectification
You have the right to request that we correct any personal data that is inaccurate or incomplete. We will make the necessary corrections without undue delay.
Right to Erasure
You have the right to request the deletion of your personal data where there is no compelling reason for its continued processing. This right is not absolute and only applies in certain circumstances.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of your data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground.
Rights Related to Automated Decision Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context of the data and our obligations.
International Transfers
We do not routinely transfer personal data outside the United Kingdom or European Economic Area. Should any transfer be necessary, we will ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.
Exercising Your Rights
To exercise any of your rights, please contact us using the details below. We may need to verify your identity before processing your request. We will respond to all legitimate requests within one month. Occasionally, it may take us longer if your request is particularly complex or you have made multiple requests.
Complaints
If you are not satisfied with how we handle your personal data or believe we have not complied with your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Contact Information
For any questions about this GDPR compliance statement or to exercise your rights, please contact:
onerarinas
47 Victoria Street
Liverpool L1 6DE
United Kingdom
[email protected]
This document was last updated in July 2026.