GDPR Compliance

Last Updated: June 2026

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contract Performance: Processing necessary to provide services you have requested
• Legitimate Interests: Processing necessary for our business operations, such as improving services and preventing fraud
• Consent: Where you have explicitly agreed to specific processing activities
• Legal Obligation: Where processing is required to comply with legal requirements

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right of Access

You can request confirmation of whether we process your personal data and obtain a copy of that data. We will provide this information within one month of your request.

Right to Rectification

You can request correction of inaccurate personal data. We will update records within one month of receiving verified correction requests.

Right to Erasure

You can request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes it was collected, or when you withdraw consent. This right is subject to legal retention requirements.

Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You can request to receive personal data you provided to us in a structured, commonly used, and machine-readable format, or request that we transmit this data to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects. We do not currently engage in such automated decision-making.

How to Exercise Your Rights

To exercise any of these rights, contact us using the email address on our contact page. We will respond to requests within one month, though this may be extended by two additional months for complex requests.

We may require verification of your identity before processing requests to ensure we protect personal data from unauthorized access.

Data Protection Officer

For questions about data protection practices or to raise concerns, contact us at the email address provided on our contact page.

Right to Lodge a Complaint

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

International Data Transfers

We do not routinely transfer personal data outside the UK or European Economic Area. If such transfers become necessary, we will implement appropriate safeguards to protect your data in accordance with GDPR requirements.

Changes to This Information

We may update this GDPR compliance information periodically. Significant changes will be communicated through our website.