GDPR Compliance
Last updated: June 2026
Our Commitment to Data Protection
rustic-ocean is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of your personal data seriously and have implemented appropriate measures to ensure compliance.
Data Controller
rustic-ocean acts as the data controller for personal information collected through this website. Our contact details are:
Address: 47 Leopold Street, Sheffield, S1 2GY, United Kingdom
Email: [email protected]
Your Rights Under UK GDPR
As a data subject, you have the following rights:
Right to be Informed
You have the right to be informed about how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR page.
Right of Access
You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond to valid requests within one month.
Right to Rectification
If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to request correction.
Right to Erasure
Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose.
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain circumstances, such as while we verify the accuracy of contested data.
Right to Data Portability
Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including for direct marketing purposes.
Rights Related to Automated Decision Making
You have rights in relation to automated decision making and profiling. We do not currently use automated decision-making processes that significantly affect you.
How to Exercise Your Rights
To exercise any of your data protection rights, please contact us using the details provided above. We may need to verify your identity before processing your request.
Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:
- Secure data storage systems
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
Data Breach Procedures
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach. Where required, we will also notify affected individuals without undue delay.
Complaints
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Updates to This Information
We may update this GDPR information periodically. Significant changes will be communicated through our website.