Last Updated: September 2026
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and what rights you have regarding your personal information.
We process your personal data based on the following legal grounds:
For the purposes of GDPR, the data controller is:
glenbloom
Manchester, United Kingdom
Under GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. This information will be provided free of charge within one month of your request.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected, or if you withdraw consent.
You can request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
We do not use automated decision-making or profiling in our processing of your personal data.
To exercise any of your GDPR rights, please contact us using the information provided on our contact page. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two additional months, and we will inform you of any such extension.
For questions specifically related to data protection and GDPR compliance, you may contact our data protection representative at the address provided on our contact page.
If you believe we have not complied with GDPR requirements, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.
We do not transfer personal data outside the United Kingdom. If this changes in the future, we will ensure appropriate safeguards are in place in accordance with GDPR requirements.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, as required by GDPR.
We collect only the personal data that is necessary for the purposes outlined in our Privacy Policy. We do not collect excessive or irrelevant information.
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised date.