GDPR Compliance Statement

Last Updated: August 4, 2026

Our Commitment to GDPR

lagoon-deer.com is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable UK data protection legislation.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: When processing is necessary to fulfil service agreements
• Legitimate Interests: When processing serves our legitimate business interests while respecting your rights
• Legal Obligation: When required by law

Data Subject Rights

Under GDPR, you have the following rights:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.

Right to Restriction of Processing

You may request limitation of processing activities in certain circumstances.

Right to Data Portability

You may request transfer of your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

Data Protection Measures

We implement appropriate technical and organisational measures, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments
• Staff training on data protection principles
• Data minimisation practices

Data Breach Notification

In the event of a data breach that poses risks to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours as required by GDPR.

International Data Transfers

We do not routinely transfer personal data outside the United Kingdom or European Economic Area. Any such transfers would be conducted with appropriate safeguards in place.

Data Retention

We retain personal data only for as long as necessary to fulfil stated purposes or comply with legal requirements. Retention periods vary based on data categories and applicable legal obligations.

Third-Party Processing

When we engage third-party service providers who process personal data on our behalf, we ensure they provide sufficient guarantees of GDPR compliance through contractual arrangements.

Exercising Your Rights

To exercise any GDPR rights, contact us at:

[email protected]

42 Ecclesall Road, Sheffield, S11 8PR, United Kingdom

We will respond to requests within one month, with possible extensions in complex cases.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.

ICO Website: www.ico.org.uk