GDPR Compliance

Last updated: June 2026

Our Commitment to Data Protection

glow-vane is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognise the importance of protecting personal data and respecting the privacy rights of all individuals whose data we process.

This page provides information about how we uphold data protection principles and your rights as a data subject.

Data Protection Principles

We adhere to the following data protection principles in all our data processing activities:

• Lawfulness, Fairness, and Transparency: We process personal data lawfully and transparently, ensuring individuals understand how their data is used.
• Purpose Limitation: We collect data only for specified, explicit, and legitimate purposes and do not process it in ways incompatible with those purposes.
• Data Minimisation: We limit personal data collection to what is necessary for the purposes for which it is processed.
• Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date.
• Storage Limitation: We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.
• Integrity and Confidentiality: We implement appropriate security measures to protect personal data against unauthorised access, loss, or damage.
• Accountability: We take responsibility for our data processing activities and can demonstrate compliance with these principles.

Your Data Subject Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right to Be Informed

You have the right to be informed about how we collect and use your personal data. Our Privacy Policy provides detailed information about our data processing practices.

Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to such requests within one month of receipt.

Right to Rectification

You have the right to request correction of any inaccurate personal data we hold about you, or to have incomplete data completed.

Right to Erasure

Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.

Right to Restrict Processing

You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data in certain circumstances, including processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. We do not currently engage in such automated decision-making.

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the details below. We may need to verify your identity before processing your request to protect your personal data from unauthorised access.

We aim to respond to all data subject requests within one month. If your request is complex or we receive a large number of requests, we may extend this period by up to two months, in which case we will inform you of the extension and the reasons for it.

There is no fee to exercise your rights unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act on the request.

Legal Basis for Processing

We only process personal data when we have a valid legal basis to do so. The legal bases we rely on include:

• Consent: You have given clear consent for us to process your personal data for a specific purpose.
• Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided these are not overridden by your interests, rights, or freedoms.

Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Secure storage systems with access controls
• Encryption of data in transit
• Regular security assessments and updates
• Staff training on data protection responsibilities
• Incident response procedures

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

International Data Transfers

We primarily process personal data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authorities or transfers to countries with adequate data protection laws.

Supervisory Authority

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom

Website: ico.org.uk

Contact Us

For any questions about our GDPR compliance or to exercise your data protection rights, please contact us:

glow-vane
47 Greenfield Business Centre
Manchester, M2 4WQ
United Kingdom

Email: [email protected]