GDPR Compliance Statement
Last Updated: September 30, 2026
glowinglark is committed to protecting the privacy and security of personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This statement outlines our compliance approach and your rights as a data subject.
Our Commitment to GDPR Compliance
We adhere to the fundamental principles of data protection as outlined in UK GDPR:
- Lawfulness, fairness, and transparency in data processing
- Purpose limitation - collecting data only for specified, legitimate purposes
- Data minimisation - collecting only necessary information
- Accuracy - maintaining correct and up-to-date records
- Storage limitation - retaining data only as long as necessary
- Integrity and confidentiality - ensuring appropriate security measures
- Accountability - demonstrating compliance with these principles
Legal Basis for Data Processing
We process personal data under the following legal bases as defined by UK GDPR:
Consent
When you submit enquiry forms or service requests, you provide explicit consent for us to process your personal information. You may withdraw consent at any time by contacting us.
Legitimate Interests
We may process certain data based on our legitimate business interests, including:
- Improving our website functionality and user experience
- Analyzing service enquiry patterns to enhance our offerings
- Protecting against fraud and security threats
Legal Obligation
We process data when required to comply with legal obligations under UK law.
Your Data Protection Rights
Under UK GDPR, you have comprehensive rights regarding your personal data:
Right to Access
You have the right to request access to the personal data we hold about you. We will provide a copy of your data in a commonly used electronic format.
Right to Rectification
You can request correction of inaccurate or incomplete personal data. We will update your information within one month of your request.
Right to Erasure
You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
Right to Restriction of Processing
You can request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You can request transfer of your personal data to another organisation or directly to you in a structured, commonly used format.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
How to Exercise Your Rights
To exercise any of your data protection rights, please contact us at [email protected] with the following information:
- Your full name and contact details
- Description of the right you wish to exercise
- Any relevant supporting information
We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will notify you of any extension.
Data Security Measures
We implement appropriate technical and organisational security measures to protect your personal data, including:
- Secure data transmission using encryption protocols
- Regular security assessments and updates
- Access controls limiting data access to authorised personnel only
- Staff training on data protection principles and practices
- Data breach response procedures
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals without undue delay.
International Data Transfers
We process and store personal data within the United Kingdom. We do not transfer personal data outside the UK unless appropriate safeguards are in place in accordance with UK GDPR requirements.
Data Protection Officer
For questions regarding data protection or GDPR compliance, you may contact us at:
Email: [email protected]
Address: 42 Wellington Street, Leeds LS1 4AB, United Kingdom
Complaints and Supervisory Authority
If you believe we have not handled your personal data in accordance with UK GDPR, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: www.ico.org.uk
Updates to This Statement
We may update this GDPR Compliance Statement periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website with an updated effective date.