Last Updated: October 2026
We are committed to complying with the General Data Protection Regulation (GDPR) and ensuring that your personal data is processed lawfully, fairly, and transparently. This page provides specific information about our GDPR compliance practices.
For the purposes of GDPR, we act as the data controller for personal information collected through this website and our services. We determine the purposes and means of processing your personal data.
We process your personal data under the following lawful bases as defined by GDPR:
Under GDPR, you have the following rights regarding your personal data:
You have the right to request access to your personal data and receive information about how we process it. We will provide a copy of your data in a commonly used electronic format.
You have the right to request correction of inaccurate personal data and to have incomplete data completed.
You have the right to request deletion of your personal data in certain circumstances, including where it is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have contested.
Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise any of your GDPR rights, please contact us using the details provided on our contact page. We will respond to your request within one month, though this may be extended in complex cases. We will inform you of any extension and the reasons for it.
You will not usually need to pay a fee to exercise your rights. However, we may charge a reasonable fee or refuse to comply with a request if it is clearly unfounded, repetitive, or excessive.
While we are not required to appoint a Data Protection Officer under GDPR, we have designated a responsible person to oversee our data protection practices and ensure ongoing compliance. Questions about data protection can be directed through our contact page.
We primarily store and process data within the European Economic Area (EEA). If we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required by GDPR.
We do not use automated decision making or profiling that produces legal effects or similarly significantly affects you.
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete it.
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. In the UK, the relevant authority is the Information Commissioner's Office (ICO).
We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. Please check this page periodically for updates.