GDPR Compliance Statement

Last Updated: June 19, 2026

Our Commitment to GDPR

thicket-elk is committed to protecting your personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

Data Controller

thicket-elk acts as the data controller for personal information collected through this website and our services.

Contact: [email protected]

Address: 47 Queen Square, Bristol, BS1 4LH, United Kingdom

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Consent: When you submit forms or accept cookies
• Contract: To provide services you request
• Legitimate Interests: To improve our services and website functionality
• Legal Obligation: To comply with applicable laws and regulations

Your GDPR Rights

Under GDPR, you have the following rights:

Right to Access

You can request a copy of the personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You can request limitation on how we use your personal data.

Right to Data Portability

You can request a copy of your personal data in a structured, machine-readable format.

Right to Object

You can object to processing of your personal data in certain circumstances.

Rights Related to Automated Decision Making

We do not use automated decision making or profiling.

How to Exercise Your Rights

To exercise any of your GDPR rights, contact us at [email protected]. We will respond to your request within one month.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

International Data Transfers

Your personal data is processed and stored within the United Kingdom. We do not transfer personal data outside the UK without appropriate safeguards.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire
SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children.

Changes to This Statement

We may update this GDPR compliance statement periodically. Changes become effective when posted on this page.