GDPR Compliance
Our commitment to data protection under UK GDPR.
Last updated: September 2026
Our Commitment
snow-seal is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of your personal data seriously and have implemented measures to ensure your rights are respected.
Data Controller
snow-seal acts as the data controller for personal information collected through our website and in the course of providing our advisory services. This means we determine the purposes and means of processing your personal data.
Your Rights Under UK GDPR
Under UK GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will respond to such requests within one month and provide the information free of charge.
Right to Rectification
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will address such requests promptly.
Right to Erasure
In certain circumstances, you have the right to request deletion of your personal data. This applies when the data is no longer necessary for the purpose it was collected, or when you withdraw consent.
Right to Restrict Processing
You have the right to request that we limit how we use your personal data in certain circumstances, such as when you contest its accuracy.
Right to Data Portability
Where processing is based on consent or contract performance, you have the right to receive your personal data in a structured, commonly used format and transfer it to another controller.
Right to Object
You have the right to object to processing based on legitimate interests, including profiling. We will cease processing unless we can demonstrate compelling legitimate grounds.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently engage in such automated decision making.
Exercising Your Rights
To exercise any of your rights under UK GDPR, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by two months, but we will inform you if this is necessary.
Data Protection Principles
We adhere to the following principles when processing your personal data:
- Lawfulness, fairness, and transparency: We process data lawfully and clearly inform you about how your data is used
- Purpose limitation: We collect data for specified, explicit purposes and do not use it in incompatible ways
- Data minimisation: We only collect data that is necessary for our stated purposes
- Accuracy: We keep personal data accurate and up to date
- Storage limitation: We retain data only as long as necessary
- Integrity and confidentiality: We protect data against unauthorised processing, loss, or damage
International Data Transfers
We primarily process data within the United Kingdom. If any data is transferred outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to you, we will also notify you directly without undue delay.
Contact Our Data Protection Team
For any questions regarding our GDPR compliance or to exercise your data rights, please contact us at [email protected].
Supervisory Authority
If you are not satisfied with our response to any data protection concern, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). You can contact the ICO through their website or by post at: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.