GDPR Compliance

Last updated: June 18, 2026

Our Commitment to Data Protection

We comply with the General Data Protection Regulation and UK Data Protection Act 2018 in all aspects of data collection, processing, and storage.

Lawful Basis for Processing

We process personal data based on the following lawful grounds:

Data Subject Rights

Under GDPR, you have the following rights:

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy. Client records are typically maintained for up to three years after the last service provision, unless longer retention is required by law.

Data Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

Third-Party Data Sharing

We do not share personal data with third parties except when required by law or necessary to provide requested services. Any such sharing complies with GDPR requirements.

International Data Transfers

Personal data is processed and stored within the United Kingdom. We do not transfer data outside the UK or European Economic Area.

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the information on our contact page. We will respond to requests within one month.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office.