GDPR Compliance

Last updated: June 16, 2026

Our Commitment to Data Protection

We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

Legal Basis for Processing

We process personal data on the following legal bases:

Consent: When you submit an inquiry form, you provide explicit consent for us to process your personal information for the purpose of responding to your request.
Legitimate interests: We may process data where necessary for our legitimate business interests, such as improving our services, provided this does not override your rights and freedoms.

Data Controller

For the purposes of data protection legislation, the data controller is:

deft-fern
42 Albemarle Street
Bath, Somerset BA1 5DN
United Kingdom

Types of Data Collected

We collect and process the following categories of personal data:

Identity data (name)
Contact data (email address)
Inquiry data (service selection, messages, project details)
Technical data (IP address, browser type, device information collected through cookies)

Data Subject Rights

Under GDPR, you have the following rights:

Right to access: You can request copies of your personal data.
Right to rectification: You can request correction of inaccurate or incomplete data.
Right to erasure: You can request deletion of your personal data in certain circumstances.
Right to restrict processing: You can request limitation of how we process your data.
Right to data portability: You can request transfer of your data to another organization.
Right to object: You can object to processing based on legitimate interests.
Rights related to automated decision-making: We do not use automated decision-making or profiling.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Inquiry data from prospective clients who do not proceed with our services is deleted after twelve months.

International Transfers

Your personal data is processed and stored within the United Kingdom. We do not transfer data outside the UK or European Economic Area.

Security Measures

We implement appropriate technical and organizational measures including:

Secure data storage systems
Access controls limiting who can view personal data
Encryption of data in transit
Regular security assessments

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: www.ico.org.uk

Contact for Data Protection Queries

For questions about how we handle your personal data, contact us at [email protected].