Your data protection rights under UK GDPR
cerulean-rain is committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle your personal data and your rights under these regulations.
For the purposes of data protection legislation, cerulean-rain is the data controller responsible for your personal data. Our contact details are:
cerulean-rain
47 Broadcast Lane
Manchester, M3 4FT
United Kingdom
Email: [email protected]
Under the UK GDPR, you have the following rights regarding your personal data:
You have the right to be informed about how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR information page.
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month of receiving it.
You have the right to request that we correct any inaccurate personal data we hold about you, or complete any incomplete data.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected, or when you withdraw consent.
You have the right to request that we limit the way we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing of it.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.
You have the right to object to certain types of processing, including processing for direct marketing purposes and processing based on legitimate interests.
You have rights related to automated decision making and profiling. We do not currently use automated decision-making processes that produce legal effects or significantly affect you.
To exercise any of your rights under UK GDPR, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to your request within one month, though this may be extended by up to two months for complex requests.
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing your personal data. These measures include encryption, access controls, and regular security assessments.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
We do not routinely transfer personal data outside the United Kingdom. Should any transfer be necessary, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
Last updated: September 2026