Last updated: July 6, 2026
We process personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. This page outlines how we comply with these regulations and protect your rights as a data subject.
We process your personal information based on the following legal grounds:
Under GDPR, you have the following rights regarding your personal data:
You can request a copy of all personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within one month of your request.
If personal information we hold about you is inaccurate or incomplete, you have the right to request correction. We will update your information promptly upon verification of the correct details.
You can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected, when you withdraw consent, or when you object to processing based on legitimate interests.
You may request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
Where technically feasible, you have the right to receive your personal data in a portable format and transmit it to another service provider without hindrance.
You can object to processing of your personal data based on legitimate interests. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, send a request to [email protected] with "Data Subject Request" in the subject line. Include your full name, email address used for consultation requests, and specify which right you wish to exercise.
We will respond to your request within one month. In complex cases, this period may be extended by two months, and we will inform you of any extension and the reasons for delay.
For questions specifically related to data protection and GDPR compliance, you may contact our data protection officer at [email protected].
Your personal data is stored and processed within the United Kingdom. We do not routinely transfer personal data outside the UK. Should international transfers become necessary, we will implement appropriate safeguards to protect your information.
We do not use automated decision-making processes or profiling that produces legal effects or similarly significant effects on individuals.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals without undue delay.
You have the right to lodge a complaint with the Information Commissioner's Office if you believe we have not complied with applicable data protection laws. Contact details for the ICO are available at ico.org.uk.
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.
We review and update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. The date at the top indicates the most recent update.