GDPR Compliance

Last updated: June 18, 2026

Data Controller

crimsonbreeze-haven acts as the data controller for personal information collected through our website and services. We determine how and why personal data is processed.

Contact details:
crimsonbreeze-haven
47 Greenfield Lane
Bristol BS3 4RW
United Kingdom
Email: [email protected]

Your GDPR Rights

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee for multiple copies or manifestly unfounded requests.

Right to Rectification

You have the right to request correction of inaccurate personal data and to complete incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including:

• The data is no longer necessary for its original purpose
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restrict Processing

You have the right to request restriction of processing in certain circumstances:

• You contest the accuracy of the data
• Processing is unlawful but you prefer restriction to erasure
• We no longer need the data but you need it for legal claims
• You have objected to processing pending verification of legitimate grounds

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making

We do not currently engage in automated decision-making or profiling that produces legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with:

• Your full name and contact information
• Description of your request
• Proof of identity if required

We will respond to your request within one month. In complex cases, this may be extended by two months with explanation.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you provide explicit consent through forms or cookie acceptance
• Contract: To fulfill service agreements and consultations
• Legal obligation: To comply with regulatory requirements
• Legitimate interests: To improve services, maintain security, and communicate about relevant ecological projects

Data Protection Officer

For organizations of our size, appointment of a Data Protection Officer is not mandatory. However, data protection inquiries can be directed to our designated contact at [email protected]

Data Security Measures

We implement appropriate technical and organizational measures including:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorized personnel
• Regular security assessments and updates
• Staff training on data protection obligations

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

When transferring personal data outside the UK or EEA, we ensure adequate protection through:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions recognizing equivalent protection
• Other appropriate safeguards as permitted by law

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

Updates to GDPR Compliance

We review our data protection practices regularly to ensure ongoing compliance. This page will be updated to reflect any changes in our GDPR approach.