GDPR Compliance Statement

Last Updated: August 2026

Overview

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This statement outlines our compliance measures and your rights under these regulations.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you voluntarily provide information through forms or direct communication
• Contract: When processing is necessary for performing our services
• Legitimate Interests: For business operations that do not override your fundamental rights
• Legal Obligation: When required to comply with regulatory requirements

Data Controller Information

For the purposes of GDPR, the data controller is:

dune-glow
47 Darley Street
Bradford, West Yorkshire
BD1 3HN, United Kingdom

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure

You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You may request that we limit the processing of your personal data in specific situations.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produces legal effects or similarly significant impacts.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended by two additional months for complex requests.

Data Protection Officer

For specific questions regarding data protection practices or to lodge a complaint, you may contact our designated data protection representative through the email address provided above.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not complied with applicable data protection laws. Contact information for the ICO is available at ico.org.uk.

International Data Transfers

We do not routinely transfer personal data outside the United Kingdom. Should such transfers become necessary, we will ensure appropriate safeguards are in place as required by GDPR.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material updates will be communicated through our website.