GDPR Compliance

Last updated: August 2026

Our Commitment

We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and UK GDPR requirements. This page outlines how we process personal data in accordance with these regulations.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to fulfill our service obligations to you
• Legitimate interests: When processing serves our legitimate business interests while respecting your rights
• Legal obligation: When required to comply with legal requirements

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You may request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within one month of your request.

Right to Rectification

If you believe any information we hold about you is inaccurate or incomplete, you may request that we correct or complete it.

Right to Erasure

You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You may request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You may object to our processing of your personal data based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Protection Officer

For questions regarding data protection or to exercise your rights, please contact us at [email protected]

International Data Transfers

We store and process your data within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with GDPR requirements.

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.