GDPR Compliance
The General Data Protection Regulation gives individuals in the EU and UK specific rights over their personal data. Below are those rights in plain terms, and how to exercise them here.
Applies to personal data collected through this website.
These rights apply to personal data submitted through this website's forms, and to the automatically collected browsing data described in the privacy policy. A separate signed client agreement states its own terms instead.
Website visitors and enquirers
Anyone submitting a form or whose browsing data this site collects falls under this page.
Six rights, stated plainly rather than in statute language.
GDPR grants a defined set of rights over personal data. Each one is honoured for data this site holds, and a request can cover more than one right at once.
Right of access
Ask what personal data is held about you and why.
Right to rectification
Ask for incorrect or incomplete data to be corrected.
Right to erasure
Ask for personal data to be deleted where no legal reason requires keeping it.
Right to restrict processing
Ask for processing to pause while a dispute over the data is resolved.
Right to data portability
Ask for data you provided in a structured, commonly used format.
Right to object
Object to a specific use of your data, such as for direct marketing.
Processing rests on consent or a legitimate interest.
Personal data submitted through a form is processed on the basis that you provided it for a specific purpose, such as requesting a reply. Automatically collected browsing data supports the legitimate interest of operating and improving this site.
Consent for form submissions
Submitting a form is treated as consent to be contacted about that specific enquiry.
Legitimate interest for site operation
Aggregate browsing data supports running and improving the site, balanced against your right to object.
One route in: a message through the contact page.
There is a single, simple way to exercise any of the rights above, and it is answered by a person rather than an automated system.
01Step oneDescribe the request
State which right you are exercising and, where relevant, which data it concerns.
02Step twoIdentity is verified
A reasonable check confirms the request comes from the person the data concerns.
03Step threeThe request is actioned
The request is carried out within the timeframe GDPR requires, and confirmed back to you once complete.
You may also complain to a supervisory authority.
If a request is not handled to your satisfaction, GDPR gives you the right to lodge a complaint with the supervisory authority in your own country. That route does not depend on anything this site resolves first.
An independent route always exists
A supervisory authority complaint does not require exhausting a request through this site first.