GDPR Compliance

Last Updated: June 19, 2026

Our Commitment to Data Protection

bold-gorge is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This document outlines how we comply with data protection principles and your rights as a data subject.

Data Controller Information

For the purposes of data protection legislation, the data controller is:

bold-gorge
47 Wellington Street
Leeds, West Yorkshire
LS1 4JN
United Kingdom

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you voluntarily submit information through forms or subscribe to communications
• Contract: When processing is necessary to fulfill our service obligations to you
• Legitimate Interest: For business operations, fraud prevention, and improving our services
• Legal Obligation: To comply with regulatory and legal requirements

Data Protection Principles

We adhere to the following data protection principles when processing your personal data:

• Processed lawfully, fairly, and transparently
• Collected for specified, explicit, and legitimate purposes
• Adequate, relevant, and limited to what is necessary
• Accurate and kept up to date
• Retained only as long as necessary
• Processed securely with appropriate technical and organizational measures

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.

Right to Rectification

You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.

Right to Erasure

You have the right to request deletion of your personal data under certain conditions, such as when the data is no longer necessary for the purposes it was collected.

Right to Restrict Processing

You have the right to request restriction of processing of your personal data under certain conditions.

Right to Object to Processing

You have the right to object to processing of your personal data under certain conditions, particularly for direct marketing purposes.

Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you under certain conditions.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended in complex cases.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk

Data Breach Procedures

We have implemented procedures to detect, report, and investigate personal data breaches. In the event of a breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

International Data Transfers

We do not routinely transfer personal data outside the United Kingdom. Should such transfers become necessary, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Please check this page periodically for updates.