GDPR Compliance

Last updated: September 1, 2026

Our Commitment to Data Protection

We are committed to compliance with the UK General Data Protection Regulation and maintaining the highest standards of data protection. This page outlines how we fulfill our obligations under data protection law.

Data Controller Information

We act as the data controller for personal information collected through our website and business activities.

Contact details:
Email: [email protected]
Address: 42 Newhall Street, Birmingham B3 3EL, United Kingdom

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so:

• Consent: When you voluntarily provide information through contact forms
• Legitimate Interests: For business operations, service improvement, and responding to inquiries
• Contractual Necessity: When providing consulting services you have requested
• Legal Obligation: When required by law to retain or process certain information

Data Subject Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data in certain circumstances, such as when data is no longer necessary for its original purpose.

Right to Restrict Processing

You can request restriction of processing in specific situations, such as when you contest the accuracy of data.

Right to Data Portability

You can request transfer of your personal data to another controller in a structured, commonly used format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month of receipt. In complex cases, this period may be extended by two additional months.

You will not be charged for exercising your rights unless your request is manifestly unfounded or excessive.

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy:

• Inquiry data: retained for 2 years after last contact
• Client data: retained for 7 years after project completion for legal and accounting purposes
• Website analytics: retained for 26 months

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls limiting data access to authorized personnel
• Staff training on data protection obligations
• Incident response procedures for data breaches

Data Breach Notification

In the event of a data breach likely to result in high risk to your rights and freedoms, we will notify you without undue delay and no later than 72 hours after becoming aware of the breach.

International Data Transfers

We store and process personal data within the United Kingdom. If data transfer outside the UK becomes necessary, we will ensure appropriate safeguards are in place as required by UK GDPR.

Third-Party Processors

We work with limited third-party service providers who process personal data on our behalf. All processors are bound by data processing agreements ensuring GDPR compliance.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Updates to This Information

We may update this GDPR compliance information to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.