GDPR Compliance

We process personal data lawfully, transparently and for clearly defined purposes, in line with UK and EU data protection law.

Data is retained only for as long as it is needed, and secured with access controls, encryption in transit and regular backups.

Data subject requests — access, rectification, erasure, portability or objection — are handled within statutory timeframes.