GDPR Compliance

Last Updated: May 22, 2026

Our Commitment to Data Protection

verda-gleam is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.

Data Controller Information

verda-gleam
42 Greenfield Way
Bristol, BS1 6HQ
United Kingdom
Email: [email protected]

Lawful Bases for Processing

We process personal data under the following lawful bases:

Consent (Article 6(1)(a))

When you voluntarily provide information through forms or explicit agreement to communications, we process your data based on your consent. You may withdraw consent at any time.

Contractual Necessity (Article 6(1)(b))

Processing necessary to fulfill service agreements and deliver requested services.

Legitimate Interests (Article 6(1)(f))

We process data for legitimate business interests including:

Responding to inquiries
Improving our services
Maintaining security
Business administration

Legal Obligation (Article 6(1)(c))

Processing required to comply with legal and regulatory requirements.

Your GDPR Rights

Right to Access (Article 15)

You have the right to request confirmation of whether we process your data and obtain a copy of your personal information.

Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete personal data.

Right to Erasure (Article 17)

You may request deletion of your personal data when:

It's no longer necessary for the purposes collected
You withdraw consent
You object to processing
It was unlawfully processed
Legal obligation requires deletion

Right to Restriction (Article 18)

You can request restriction of processing in certain circumstances, such as while accuracy is being verified.

Right to Data Portability (Article 20)

You have the right to receive your data in a structured, commonly used format and transmit it to another controller.

Right to Object (Article 21)

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making (Article 22)

We do not use automated decision-making or profiling that produces legal effects.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with:

Your full name
Email address associated with your inquiry
Specific right you wish to exercise
Any relevant details to help us locate your data

We will respond within one month of receiving your request. In complex cases, we may extend this by two additional months.

Data Protection Officer

For questions about data protection practices, contact our data protection contact at [email protected].

Data Breach Notification

In the event of a data breach likely to result in high risk to your rights, we will notify you without undue delay in accordance with Article 34 of GDPR.

International Data Transfers

If we transfer your data outside the UK/EEA, we ensure appropriate safeguards through:

Standard contractual clauses
Adequacy decisions
Other approved mechanisms

Data Retention

We retain personal data only for as long as necessary for the purposes outlined or as required by law. Our standard retention periods are:

Inquiry data: 3 years
Client project data: Duration of engagement plus 7 years
Financial records: 7 years (legal requirement)
Marketing consent: Until withdrawn

Children's Data

We do not knowingly process data of individuals under 16 without parental consent as required by Article 8.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Updates will be posted with revision dates.

Contact Information

For any questions regarding GDPR compliance or data protection:

Email: [email protected]
Address: 42 Greenfield Way, Bristol, BS1 6HQ, United Kingdom