GDPR Compliance Statement

Last updated: September 1, 2026

Our Commitment to Data Protection

Bold-lagoon.com is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit forms or contact us, you consent to processing for the specified purpose
• Contractual necessity: To fulfill service agreements and deliver contracted safety services
• Legitimate interests: To improve our services and maintain business records
• Legal obligation: To comply with regulatory and legal requirements

Data Controller

The data controller responsible for your personal information is:

bold-lagoon.com
42 Wellington Street
Manchester M3 4NR
United Kingdom

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You can request a copy of the personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You can request that we limit how we use your personal data.

Right to Data Portability

You can request transfer of your data to another service provider in a structured, commonly used format.

Right to Object

You can object to processing of your personal data in certain situations.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects.

How to Exercise Your Rights

To exercise any of your GDPR rights, contact us at:

[email protected]

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of the extension.

Data Transfers

We process and store personal data within the United Kingdom. If data is transferred outside the UK, we ensure appropriate safeguards are in place to protect your information.

Data Security Measures

We implement appropriate technical and organizational measures including:

• Secure storage systems with access controls
• Encryption of sensitive data during transmission
• Regular security assessments and updates
• Staff training on data protection requirements
• Confidentiality agreements with service providers

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Retention Periods

We retain personal data only for as long as necessary:

• Contact inquiries: 2 years from last contact
• Service contracts: 6 years after completion (for legal and insurance purposes)
• Marketing consent: Until withdrawn or 3 years of inactivity

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom

Helpline: 0303 123 1113
Website: www.ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Significant changes will be communicated to affected individuals.

Contact for Data Protection Matters

For questions or concerns regarding data protection and GDPR compliance:

[email protected]