GDPR Compliance

Last updated: August 2026

Our Commitment to Data Protection

We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you provide information through our forms
• Contract: When necessary to provide our services
• Legitimate interests: To improve our services and communicate with you
• Legal obligation: When required by law

Data Controller

For the purposes of data protection law, we are the data controller responsible for your personal information.

Contact: [email protected]
Address: 42 Division Street, Sheffield, S1 4GF, United Kingdom

Your GDPR Rights

Under GDPR, you have the following rights:

• Right to access: You can request copies of your personal data
• Right to rectification: You can request correction of inaccurate data
• Right to erasure: You can request deletion of your data
• Right to restrict processing: You can request limits on how we use your data
• Right to data portability: You can request transfer of your data
• Right to object: You can object to certain types of processing
• Rights related to automated decision-making: We do not use automated decision-making

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, typically:

• Active client data: Duration of engagement plus 3 years
• Enquiry data: 2 years from last contact
• Financial records: 6 years as required by law

International Transfers

We do not transfer personal data outside the United Kingdom. Should this change, we will implement appropriate safeguards and notify you.

Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: www.ico.org.uk
Helpline: 0303 123 1113

Updates to This Notice

We may update this GDPR compliance notice from time to time. Significant changes will be communicated to you directly.