GDPR Compliance

Last Updated: October 2026

Our Commitment to Data Protection

Periwinkle-wind.com is committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you voluntarily provide information through our forms
• Contractual necessity: To fulfil service agreements and lettings arrangements
• Legitimate interests: To operate our business and improve services
• Legal obligation: To comply with regulatory requirements

Your GDPR Rights

Under GDPR, you are entitled to:

Right to Access

You may request a copy of the personal data we hold about you. We will provide this information within one month of your request.

Right to Rectification

You may request correction of inaccurate or incomplete personal data. We will amend records promptly upon verification.

Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected. This right is subject to legal retention requirements.

Right to Restriction of Processing

You may request that we limit how we use your personal data in specific situations, such as during verification of data accuracy.

Right to Data Portability

You may request transfer of your data to another organisation in a structured, commonly used format where technically feasible.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Data Security Measures

We implement comprehensive security measures including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Staff training on data protection protocols
• Secure disposal of physical and digital records

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

Personal data is primarily stored and processed within the United Kingdom and European Economic Area. Any transfers to third countries are conducted using appropriate safeguards such as standard contractual clauses.

Exercising Your Rights

To exercise any of your GDPR rights, please submit a written request to [email protected]. We may require proof of identity to process your request. There is no fee for legitimate requests, though we reserve the right to charge for manifestly unfounded or excessive requests.

Supervisory Authority

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

ICO Contact:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113