GDPR Compliance

Legal Basis for Processing

We process personal data under the following legal bases established by GDPR:

• Consent: When you voluntarily provide information through inquiry forms or email correspondence
• Contract: To fulfill research service agreements and deliver requested work
• Legitimate Interests: To improve our services and respond to inquiries
• Legal Obligation: To comply with applicable laws and regulations

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain copies of that data. We will provide this information in a commonly used electronic format.

Right to Rectification

You may request correction of inaccurate or incomplete personal data we hold about you. We will update records promptly upon verification of corrections.

Right to Erasure

You may request deletion of your personal data under certain circumstances. This right is subject to legal retention requirements and legitimate business needs.

Right to Restrict Processing

You may request limitation of how we process your data under specific conditions, such as while we verify accuracy of contested information.

Right to Data Portability

You may request transfer of your data to another service provider in a structured, machine-readable format where technically feasible.

Right to Object

You may object to processing of your personal data based on legitimate interests. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling systems that produce legal effects or similarly significant impacts.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. Include specific details about your request. We will respond within one month of receiving a valid request. In complex cases, we may extend this period by two additional months with notification.

Data Protection Officer

For data protection inquiries, contact [email protected] with "Data Protection" in the subject line.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters, if you believe we have not handled your data appropriately.

International Data Transfers

We process and store data within the United Kingdom. We do not routinely transfer personal data outside the UK or European Economic Area. Should such transfers become necessary, we will implement appropriate safeguards as required by GDPR.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant supervisory authorities within 72 hours of becoming aware of the breach, where required by law.