GDPR Compliance
Last updated: 1 September 2026
1. Our Commitment to GDPR
reed-wave is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.
2. Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you provide explicit consent for specific processing activities
- Contract: When processing is necessary to fulfil our service obligations
- Legitimate Interest: When we have a legitimate business interest that does not override your rights
- Legal Obligation: When required to comply with UK law
3. Data Controller
The data controller responsible for your personal data is:
reed-wave
42 Kingsway Avenue
Bristol BS8 2LT
United Kingdom
4. Your GDPR Rights
Under GDPR, you have the following rights:
Right to Access
You can request a copy of the personal data we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure
You can request deletion of your personal data in certain circumstances.
Right to Restrict Processing
You can request that we limit how we use your personal data.
Right to Data Portability
You can request your data in a structured, commonly used format.
Right to Object
You can object to processing based on legitimate interests or direct marketing.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing.
5. How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Service records are typically retained for seven years for business and legal purposes.
7. International Data Transfers
Your personal data is processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place.
8. Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours.
9. Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
10. Contact Us
For any questions regarding GDPR compliance or data protection, contact us at [email protected].