GDPR Compliance Information

Effective date: 14 August 2026

Lavender-ridge.com is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Data Controller

Lavender-ridge operates as the data controller for personal information collected through our website and services. We determine the purposes and means of processing your personal data.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you provide information through our contact forms or subscribe to communications
• Contract: When processing is necessary to provide services you have requested
• Legitimate interests: When necessary for our business operations, provided this does not override your rights and interests
• Legal obligation: When required to comply with laws and regulations

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You have the right to request confirmation of whether we process your personal data and to receive a copy of that data. We will provide this information within one month of your request.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion of this information.

Right to Erasure

Under certain circumstances, you have the right to request deletion of your personal data. This applies when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restriction of Processing

You may request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data when we rely on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, if you believe we have not handled your data appropriately.

Data Security Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data in transit and at rest
• Regular security assessments and updates
• Access controls limiting who can view personal data
• Staff training on data protection practices

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymise it.

International Data Transfers

We do not transfer personal data outside the United Kingdom or European Economic Area. Should this change, we will ensure appropriate safeguards are in place as required by GDPR.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by two additional months, and we will inform you of such extension.

Data Protection Officer

For questions about how we handle your personal data or to exercise your rights, you may contact us at [email protected].

Updates to This Information

We may update this GDPR compliance information from time to time to reflect changes in our practices or legal requirements. The effective date at the top of this page indicates when it was last revised.