GDPR
Your data rights and how we honour them
This page summarises how gentle-moss complies with the UK GDPR and the Data Protection Act 2018.
Data controller
gentle-moss Ltd. is the data controller for information collected through our website and services.
Lawful bases
We rely on legitimate interests to respond to enquiries, contractual necessity to deliver services, and consent for optional cookies.
Your rights
- Access and receive a copy of your data
- Request correction or updates
- Request deletion when no longer required
- Restrict or object to processing
- Portability for data you have provided
International transfers
We store data within the UK and EEA. If a service provider operates outside these regions, we ensure appropriate safeguards are in place.
Retention
Project-related data is kept for up to seven years to meet contractual and legal obligations, unless you request earlier deletion and no legal requirement applies.
Complaints
If you have concerns about our handling of personal data, please contact us first. You also have the right to lodge a complaint with the UK Information Commissioner’s Office.