Last Updated: September 2026
We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we comply with data protection principles and your rights under these regulations.
We process personal data in accordance with the following principles:
You have the right to request copies of your personal data. We will provide this information within one month of your request.
You can request correction of inaccurate or incomplete personal data we hold about you.
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected.
You can request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
You can object to our processing of your personal data where we rely on legitimate interests as the legal basis for processing.
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
To exercise any of your data protection rights, please contact us through the contact details provided on our website. We will respond to your request within one month, though this may be extended by two additional months for complex requests.
You will not be charged for exercising your rights unless your request is clearly unfounded or excessive.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach.
Your personal data is primarily stored and processed within the United Kingdom. Any transfers outside the UK are conducted in accordance with appropriate safeguards as required by UK GDPR.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
If you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.
ICO Contact Information:
Website: ico.org.uk
Helpline: 0303 123 1113
We may update this GDPR compliance information periodically. Significant changes will be communicated through our website with an updated revision date.