GDPR Compliance Statement

Last Updated: May 16, 2026

Our Commitment to Data Protection

sly wind is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This statement outlines how we comply with data protection requirements.

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: When you provide explicit consent for specific processing activities
  • Contract: When processing is necessary for the performance of a contract with you
  • Legal Obligation: When we must comply with legal requirements
  • Legitimate Interests: When processing is necessary for our legitimate business interests, provided your rights don't override these interests

Data Controller

sly wind is the data controller for the personal information we collect and process. Our contact details are:

Email: [email protected]
Address: 42 Merchant Street, Bristol BS1 3EE, United Kingdom

Your Rights Under GDPR

Right to Access

You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR).

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You can request that we limit how we use your personal data in certain situations.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have rights regarding automated decision-making and profiling. We do not currently use automated decision-making processes.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended by two additional months for complex requests.

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication procedures
  • Employee training on data protection
  • Incident response procedures

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and inform affected individuals without undue delay.

International Data Transfers

We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Client service records: 7 years after service completion
  • Contact form inquiries: 2 years from last contact
  • Marketing consent records: Until consent is withdrawn
  • Website analytics: 26 months

Third-Party Data Processors

We work with trusted third-party service providers who process data on our behalf. All processors are required to:

  • Process data only on our documented instructions
  • Implement appropriate security measures
  • Maintain confidentiality
  • Assist with data subject rights requests
  • Delete or return data when processing ends

Children's Data

Our services are not intended for individuals under 18 years of age. We do not knowingly collect or process personal data from children.

Complaints

If you believe we have not complied with data protection law, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113

Updates to This Statement

We may update this GDPR Compliance Statement to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.

Contact Our Data Protection Officer

For questions about our data protection practices or to exercise your rights, please contact us at:

Email: [email protected]