GDPR Compliance

Our Commitment to Data Protection

storm-weasel is committed to ensuring that your privacy is protected and that we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we comply with data protection law and sets out your rights.

Who We Are

storm-weasel is the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.

Contact Details:
storm-weasel
14 Castle Street
Liverpool L2 0NR
United Kingdom
Email: [email protected]

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights in relation to your personal data:

Right to Be Informed

You have the right to be informed about the collection and use of your personal data. This is provided through our Privacy Policy and this GDPR compliance page.

Right of Access

You have the right to request a copy of the personal information we hold about you. This is known as a Subject Access Request (SAR). We will respond to your request within one month of receiving it.

Right to Rectification

You have the right to have inaccurate personal data corrected or completed if it is incomplete. Please contact us if you believe any information we hold about you is incorrect.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances, including:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent (where processing was based on consent)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

Right to Restrict Processing

You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of your data or object to our processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests, direct marketing, or processing for research and statistics.

Rights Related to Automated Decision Making

You have rights in relation to automated decision making and profiling. We do not currently use automated decision making that produces legal effects or significantly affects you.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us:

• Email: [email protected]
• Post: storm-weasel, 14 Castle Street, Liverpool L2 0NR

Please provide sufficient information to verify your identity and specify which right you wish to exercise. We will respond to your request within one month. This period may be extended by a further two months for complex requests, in which case we will inform you.

Legal Basis for Processing

We only process your personal data when we have a lawful basis to do so. The legal bases we rely on include:

• Consent: You have given clear consent for us to process your personal data for a specific purpose
• Contract: Processing is necessary to perform a contract with you or take steps at your request before entering a contract
• Legal obligation: Processing is necessary to comply with the law
• Legitimate interests: Processing is necessary for our legitimate interests or those of a third party, unless your interests override these

Data Security

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Regular testing and evaluation of security measures
• Access controls and authentication procedures
• Staff training on data protection

Data Breach Procedures

In the event of a personal data breach, we will:

• Notify the Information Commissioner's Office (ICO) within 72 hours where required
• Notify affected individuals where the breach is likely to result in a high risk to their rights and freedoms
• Document all breaches and take steps to prevent recurrence

International Transfers

We primarily process data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first.

Updates to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.

Last updated: 1 June 2026