Last Updated: September 2026
The General Data Protection Regulation provides you with specific rights regarding your personal data. We are committed to upholding these rights and ensuring you can exercise them easily.
You have the right to request confirmation of whether we are processing your personal data and, if so, to obtain a copy of that data. We will provide this information in a commonly used electronic format upon request.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction or completion. We will respond to such requests within one month.
Under certain circumstances, you have the right to request the deletion of your personal data. This applies when:
You may request that we restrict the processing of your personal data in the following situations:
Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
You have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Where we process your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office, the UK supervisory authority for data protection matters.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
To exercise any of these rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request, though this period may be extended by two further months where requests are complex or numerous.
To protect your personal data, we may need to verify your identity before processing requests to exercise your rights. This helps ensure that personal data is not disclosed to unauthorized individuals.
We process personal data in accordance with the following GDPR principles:
We primarily process and store data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
We do not use automated decision making or profiling that would have legal or similarly significant effects on you without your explicit consent or unless otherwise permitted by law.