Data Protection Principles
We process personal data in accordance with UK data protection law, including the UK GDPR. We ensure that personal data is:
- Processed lawfully, fairly, and transparently
- Collected for specified, explicit, and legitimate purposes
- Adequate, relevant, and limited to what is necessary
- Accurate and kept up to date
- Retained only for as long as necessary
- Processed securely with appropriate technical and organizational measures
Your Data Protection Rights
Right to Access
You have the right to obtain confirmation that we process your personal data and to access that data. You can request a copy of your personal information we hold.
Right to Rectification
You have the right to request correction of inaccurate personal data and to have incomplete data completed.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes it was collected.
Right to Restriction
You have the right to request restriction of processing your personal data in specific situations, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another organization.
Right to Object
You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects. We do not currently engage in such automated decision making.
Exercising Your Rights
To exercise any of these rights, please contact us at: [email protected]
We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, and we will inform you of such extension.
We may request specific information from you to confirm your identity before processing your request. This is a security measure to ensure personal data is not disclosed to unauthorized persons.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach.
International Data Transfers
Your personal data is primarily processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your data in accordance with UK data protection law.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data appropriately.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: www.ico.org.uk
Contact Our Data Protection Team
For questions about how we process your personal data or to exercise your data protection rights, please contact us at: [email protected]
Last updated: June 2026