Last updated: August 2026
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
We process your personal data under the following legal bases:
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of your request.
If you believe any information we hold about you is inaccurate or incomplete, you can request that we correct or complete it.
You can request deletion of your personal data where there is no compelling reason for its continued processing, subject to legal retention requirements.
You can request that we limit how we use your data in certain circumstances, such as while we verify information accuracy.
You can request a copy of your data in a structured, commonly used format for transfer to another service provider.
You can object to processing based on legitimate interests or for direct marketing purposes at any time.
We do not use automated decision making or profiling that produces legal effects or similarly significant impacts on individuals.
To exercise any of these rights, please contact us at [email protected] with your request. We will respond within one month and may request additional information to verify your identity.
For questions regarding data protection or to exercise your rights, you can contact our data protection contact at [email protected].
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
We do not transfer personal data outside the United Kingdom. If circumstances change requiring international transfers, we will implement appropriate safeguards and notify affected individuals.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ICO within 72 hours of becoming aware of the breach.