GDPR Compliance Statement

Effective Date: June 17, 2026

Our Commitment to Data Protection

We are committed to complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This document outlines how we implement GDPR principles in our data processing activities.

Data Controller Information

For the purposes of data protection legislation, we act as the data controller for personal information collected through our website and services. Our contact details are available on our Contact page.

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so:

• Consent: When you voluntarily provide information through our inquiry forms
• Contract: When processing is necessary to deliver services you have requested
• Legitimate Interests: For business operations, service improvement, and communication
• Legal Obligation: When required by law or regulation

Data Subject Rights

Under GDPR, you have comprehensive rights regarding your personal data:

• Right to Access: Request confirmation of what data we hold and receive a copy
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restriction: Request limitation of processing in specific situations
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing

Exercising Your Rights

To exercise any of these rights, contact us using the email address provided on our Contact page. We will respond to your request within one month, though complex requests may require up to three months with notification of the extension.

Data Minimization and Purpose Limitation

We collect only the minimum personal data necessary for specified purposes. Data is not used for purposes incompatible with those for which it was collected unless we obtain your consent or have another lawful basis.

Data Accuracy and Storage Limitation

We take reasonable steps to ensure personal data is accurate and up to date. Data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encryption of data in transit and at rest where appropriate
• Access controls limiting data access to authorized personnel
• Regular security assessments and updates
• Staff training on data protection principles

Data Breach Procedures

In the event of a personal data breach that poses a risk to individuals' rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Affected individuals will be informed without undue delay if the breach is likely to result in a high risk to their rights and freedoms.

Third-Party Processing

When we engage third-party processors, we ensure they provide sufficient guarantees regarding data protection and security. We maintain written contracts with processors that specify their data protection obligations.

International Data Transfers

If personal data is transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions confirming appropriate protection levels
• Other legally recognized transfer mechanisms

Complaints and Supervisory Authority

If you believe we have not complied with data protection obligations, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.

ICO Contact Information:
Website: www.ico.org.uk
Telephone: 0303 123 1113

Updates to This Statement

We may update this GDPR Compliance Statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website with an updated effective date.

Contact for Data Protection Inquiries

For questions regarding our GDPR compliance or to exercise your data protection rights, please contact us using the information provided on our Contact page.