GDPR Compliance

Your data protection rights under GDPR

Last Updated: January 2026

General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on 25 May 2018. It strengthens and unifies data protection for individuals within the European Union and the European Economic Area.

As a UK-based business, we are committed to complying with GDPR principles and protecting your personal data.

Your Rights Under GDPR

Right to Access

You have the right to request access to the personal data we hold about you. This is known as a Subject Access Request (SAR). We will provide you with a copy of your data free of charge within one month of your request.

Right to Rectification

If you believe any personal information we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that data.

Right to Erasure

Also known as the "right to be forgotten," you may request that we delete your personal data when:

  • The data is no longer necessary for the purpose it was collected
  • You withdraw consent and there is no other legal basis for processing
  • You object to the processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data where we are relying on legitimate interests as our legal basis for processing.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. We do not currently engage in automated decision making.

Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent: When you submit a booking form, you provide consent for us to process your data
  • Legitimate Interests: To operate our business, improve our services, and communicate with clients
  • Legal Obligation: To comply with applicable laws and regulations

Data Protection Officer

For questions about data protection or to exercise your GDPR rights, please contact us at:

[email protected]

How to Exercise Your Rights

To exercise any of your GDPR rights, please send a written request to our contact email. We will respond to your request within one month, though this may be extended by two additional months if your request is complex.

We may need to verify your identity before processing your request to ensure we are disclosing information to the correct person.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO).

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: ico.org.uk

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Staff training on data protection

International Data Transfers

We do not currently transfer personal data outside the UK or European Economic Area. If this changes, we will ensure appropriate safeguards are in place in accordance with GDPR requirements.

Updates to This Policy

We may update this GDPR compliance statement from time to time. Changes will be posted on this page with an updated date.