GDPR Compliance

Last updated: September 8, 2026

Our commitment to data protection

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and your rights under this regulation.

Legal basis for processing

We process your personal data under the following legal bases:

Your GDPR rights

Under GDPR, you have the following rights regarding your personal data:

Right to access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of your request.

Right to rectification

If you believe any information we hold about you is incorrect or incomplete, you have the right to request correction.

Right to erasure

You can request that we delete your personal data in certain circumstances, such as when it is no longer necessary for the purpose it was collected.

Right to restrict processing

You have the right to request that we restrict how we use your data in certain circumstances.

Right to data portability

You can request that we transfer your data to another organisation or provide it to you in a machine-readable format.

Right to object

You have the right to object to our processing of your personal data in certain circumstances.

Rights related to automated decision-making

We do not use automated decision-making or profiling in our processing of your personal data.

How to exercise your rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

Data security measures

We implement appropriate technical and organisational security measures to protect your personal data, including:

Data breach notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

International data transfers

Your personal data is stored and processed within the United Kingdom. We do not transfer data outside the UK or European Economic Area.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.

Contact information

For any questions or concerns about how we process your personal data, please contact us at [email protected]