Your data protection rights under UK GDPR
Last updated: June 2026
pure-osprey is committed to protecting the privacy and security of your personal information. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about how we handle your data in accordance with these regulations.
For the purposes of data protection law, pure-osprey is the data controller of the personal information we collect from you. This means we are responsible for deciding how we hold and use personal information about you.
Contact details:
Email: [email protected]
Address: Unit 7, Riverside Industrial Estate, Bristol BS2 0QR, United Kingdom
Under the UK GDPR, you have several rights in relation to your personal information. These rights include:
You have the right to be informed about the collection and use of your personal data. We provide this information through our Privacy Policy and this GDPR information page.
You have the right to request access to your personal data and to obtain information about how we process it. You can request a copy of the personal data we hold about you free of charge. We will respond to your request within one month.
You have the right to have inaccurate personal data corrected or completed if it is incomplete. If you believe any information we hold about you is incorrect, please contact us and we will correct it promptly.
You have the right to request the deletion of your personal data in certain circumstances, including:
You have the right to request the restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of your data or when you have objected to processing pending verification of legitimate grounds.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance. This right applies where processing is based on consent or a contract and is carried out by automated means.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes. If you object to processing for direct marketing, we will stop processing your data for that purpose immediately.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not currently use automated decision-making processes.
To exercise any of your rights under UK GDPR, please contact us using the details below. We may ask you to verify your identity before processing your request.
Email: [email protected]
Address: Unit 7, Riverside Industrial Estate, Bristol BS2 0QR, United Kingdom
We will respond to your request within one month. If your request is complex or you have made multiple requests, we may extend this period by a further two months, in which case we will notify you.
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing your personal data. These measures include:
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. We will also notify the Information Commissioner's Office within 72 hours of becoming aware of a qualifying breach.
We do not routinely transfer personal data outside of the United Kingdom. If circumstances require such a transfer, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
We may update this GDPR information page from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to review this page periodically for the latest information on our data protection practices.