GDPR Compliance

Last updated: September 2026

Our Commitment to Data Protection

storm-jaguar is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognise the importance of protecting personal data and take our responsibilities as a data controller seriously.

Data Controller

storm-jaguar acts as the data controller for personal information collected through our website and in the course of providing our consulting services. This means we determine the purposes and means of processing personal data.

Contact details for data protection enquiries:

storm-jaguar
Baltic Creative Campus
49 Jamaica Street
Liverpool L1 0AH
Email: [email protected]

Lawful Bases for Processing

We process personal data only when we have a lawful basis to do so. The lawful bases we rely on include:

• Consent: Where you have freely given clear consent for us to process your personal data for a specific purpose
• Contractual necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legal obligation: Where processing is necessary to comply with a legal obligation to which we are subject
• Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights

Your Rights Under UK GDPR

The UK GDPR provides you with the following rights concerning your personal data:

Right to be Informed

You have the right to be informed about how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR statement.

Right of Access

You have the right to request access to the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.

Right to Rectification

If you believe personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond within one month of receiving your request.

Right to Erasure

Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances. We will assess each request on its merits and inform you of the outcome.

Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

Where applicable, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests, direct marketing, or processing for research or statistical purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not currently use automated decision-making systems.

Exercising Your Rights

To exercise any of the rights described above, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to all legitimate requests within one month, though this period may be extended by a further two months for complex requests.

Data Security Measures

We implement appropriate technical and organisational measures to ensure the security of personal data, including:

• Secure storage of electronic data with access controls
• Encryption of data in transit
• Regular review of security practices
• Staff training on data protection
• Secure disposal of data when no longer required

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Complaints

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement periodically. Any changes will be posted on this page with an updated revision date.