GDPR Compliance

Last updated: June 18, 2026

Our Commitment to Data Protection

cipher-glow is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Legal Basis for Processing

We process your personal data under the following legal bases:

Consent: When you submit forms or contact us, you provide explicit consent for us to process your information
Contractual Necessity: Processing is necessary to fulfill service agreements with you
Legitimate Interests: We may process data to improve our services and maintain business operations
Legal Obligation: Compliance with applicable laws and regulations

Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of Access: Request copies of your personal data
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data under certain conditions
Right to Restrict Processing: Request limitation of how we use your data
Right to Data Portability: Receive your data in a structured, commonly used format
Right to Object: Object to processing based on legitimate interests
Rights Related to Automated Decision Making: Protection from decisions based solely on automated processing

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

Service delivery and customer support
Legal, accounting, or reporting requirements
Dispute resolution

When data is no longer required, it is securely deleted or anonymized.

Data Security Measures

We implement appropriate technical and organizational security measures to protect your personal data, including:

Encryption of data in transit and at rest
Access controls and authentication
Regular security assessments
Employee training on data protection

International Data Transfers

Your personal data is processed and stored within the United Kingdom. If we need to transfer data internationally, we ensure appropriate safeguards are in place in compliance with UK GDPR requirements.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within one month.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date.