Information on this site is advertising in nature

GDPR Information

Last updated: September 8, 2026

Our Commitment to Data Protection

We are committed to protecting your personal data and respecting your privacy rights in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about your rights under data protection legislation and how we comply with our obligations.

Data Controller Information

For the purposes of UK data protection legislation, the data controller is:

prime-blossom
17 Park Row
Leeds, LS1 5HD
United Kingdom
Email: [email protected]

Your Data Protection Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right to be Informed

You have the right to clear, transparent information about how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR information page.

Right of Access

You have the right to request access to the personal data we hold about you. This is commonly known as a "subject access request". We will provide you with a copy of your personal data upon request, free of charge, within one month of receiving your request.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you. We will respond to your request within one month and make necessary corrections where appropriate.

Right to Erasure

Also known as the "right to be forgotten", you have the right to request deletion of your personal data in certain circumstances, including:

  • The personal data is no longer necessary for the purpose it was collected
  • You withdraw consent on which processing is based
  • You object to processing and there are no overriding legitimate grounds
  • The personal data has been unlawfully processed
  • The personal data must be erased for compliance with a legal obligation

This right is not absolute and may not apply in certain circumstances, such as when we need to retain data for legal compliance or to establish, exercise, or defend legal claims.

Right to Restrict Processing

You have the right to request restriction of processing of your personal data in certain situations:

  • You contest the accuracy of the personal data
  • Processing is unlawful but you oppose erasure
  • We no longer need the data but you need it for legal claims
  • You have objected to processing pending verification of legitimate grounds

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible. This right applies when processing is based on consent or contract and is carried out by automated means.

Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for establishment, exercise, or defence of legal claims.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. We do not currently engage in automated decision-making or profiling activities.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us using the following details:

Email: [email protected]
Postal Address: 17 Park Row, Leeds, LS1 5HD, United Kingdom

When making a request, please provide sufficient information to allow us to verify your identity and locate your personal data. We may request additional information if necessary to confirm your identity and ensure we are disclosing data to the correct person.

Response Times

We will respond to your request within one month of receipt. In complex cases or if we receive multiple requests from you, we may extend this period by a further two months. If we need to extend the response time, we will inform you within the initial one-month period and explain the reason for the delay.

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so. The lawful bases we rely on include:

  • Consent: You have given clear consent for us to process your personal data for a specific purpose
  • Contract: Processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract
  • Legal obligation: Processing is necessary for us to comply with the law
  • Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests

International Data Transfers

We do not routinely transfer personal data outside the United Kingdom. Should we need to transfer data internationally in the future, we will ensure appropriate safeguards are in place to protect your personal data in accordance with UK GDPR requirements.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of personal data in transit and at rest
  • Regular security assessments and updates
  • Access controls limiting data access to authorized personnel
  • Staff training on data protection obligations
  • Incident response procedures for data breaches

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the Information Commissioner's Office within 72 hours of becoming aware of the breach, where required by law.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data appropriately or have violated your data protection rights.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113
Website: ico.org.uk

While you have the right to lodge a complaint with the ICO, we would appreciate the opportunity to address your concerns directly. Please contact us first so we can attempt to resolve any issues.

Data Protection Impact Assessments

Where our processing activities are likely to result in high risk to individuals' rights and freedoms, we conduct Data Protection Impact Assessments to identify and mitigate those risks before commencing the processing.

Updates to This Information

We may update this GDPR information page to reflect changes in data protection legislation or our processing activities. Any significant changes will be communicated through our website with an updated revision date.

Further Information

For more detailed information about how we collect, use, and protect your personal data, please refer to our Privacy Policy.

If you have questions about your data protection rights or our GDPR compliance, please contact us at [email protected]