GDPR Compliance

Last updated: 27 April 2026

oligorefle is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we meet our obligations and explains your rights.

Our Commitment

We are committed to:

• Processing personal data lawfully, fairly, and transparently
• Collecting data only for specified, explicit, and legitimate purposes
• Ensuring data is adequate, relevant, and limited to what is necessary
• Keeping data accurate and up to date
• Retaining data only for as long as necessary
• Processing data securely with appropriate technical measures

Data Controller

oligorefle acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing personal data.

Contact: [email protected]

Your Rights Under UK GDPR

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of your request, free of charge.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond within one month.

Right to Erasure

You may request deletion of your personal data where:

• The data is no longer necessary for its original purpose
• You withdraw consent (where consent was the basis for processing)
• You object to processing and there are no overriding legitimate grounds
• The data was unlawfully processed

Right to Restrict Processing

You may request restriction of processing while we verify accuracy of data, consider your objection to processing, or where processing is unlawful but you do not want erasure.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of these rights, contact us at:

Email: [email protected]
Subject line: "Data Subject Request"

We may need to verify your identity before processing your request. We will respond within one month, or inform you if an extension is required.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: Form submissions, marketing communications
• Contract: Processing rental bookings, delivering services
• Legitimate Interests: Business operations, website improvement, fraud prevention
• Legal Obligation: Tax records, regulatory compliance

Data Protection Measures

We implement appropriate security measures including:

• SSL/TLS encryption for data in transit
• Secure hosting with access controls
• Regular security assessments
• Staff training on data protection
• Data minimisation practices

International Transfers

Where we transfer data outside the UK, we ensure compliance with UK GDPR through standard contractual clauses, adequacy decisions, or other approved mechanisms.

Data Breach Procedures

In the event of a personal data breach, we will:

• Notify the Information Commissioner's Office within 72 hours where required
• Inform affected individuals without undue delay where there is high risk
• Document all breaches and our response

Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113

Updates

We review our GDPR compliance regularly and update this page as necessary. Material changes will be communicated appropriately.

Return Home