GDPR Compliance
Last updated: June 6, 2026
Our Commitment to Data Protection
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the United Kingdom.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you provide explicit consent for specific processing activities
- Contract Performance: When processing is necessary to fulfill our service obligations
- Legitimate Interest: When we have a legitimate business interest that does not override your rights
- Legal Obligation: When we must process data to comply with legal requirements
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You can request confirmation of whether we process your personal data and obtain a copy of that data.
Right to Rectification
You can request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
You can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected.
Right to Restrict Processing
You can request limitation of processing your personal data in specific situations.
Right to Data Portability
You can request to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you can withdraw that consent at any time.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the purpose of processing.
Data Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.
International Data Transfers
If we transfer your personal data outside the UK or European Economic Area, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month of receipt.
Complaints
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.
Contact Information
For questions about our GDPR compliance or to exercise your rights, contact us at [email protected].