GDPR Compliance Statement

Last updated: 30 September 2026

Our Commitment to Data Protection

Delta-civet is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take data protection seriously and have implemented policies and procedures to ensure lawful, fair, and transparent processing of personal data.

Data Controller

Delta-civet acts as the data controller for personal information collected through this website and our business operations. Our contact details are:

Delta-civet Consulting
42 Wellington Street
Leeds LS1 4HZ
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you explicitly agree to processing through form submission or contact
• Legitimate Interests: For operating our business, improving services, and maintaining website functionality
• Contractual Necessity: To fulfil service agreements and consultancy engagements
• Legal Obligation: To comply with applicable laws and regulations

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

In certain circumstances, you can request deletion of your personal data.

Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations.

Right to Data Portability

You can request a copy of your personal data in a structured, commonly used format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not currently use automated decision-making or profiling.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended in complex cases.

When submitting a request, please provide:

• Your full name and contact details
• Description of the right you wish to exercise
• Any relevant details to help us locate your information

Data Security Measures

We implement appropriate technical and organisational security measures, including:

• Secure server infrastructure and encrypted data transmission
• Access controls limiting data access to authorised personnel
• Regular security assessments and updates
• Staff training on data protection principles
• Incident response procedures for potential data breaches

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

International Data Transfers

We primarily process data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Data Retention

We retain personal data only as long as necessary for the purposes collected or as required by law. Typical retention periods include:

• Inquiry form submissions: 3 years
• Client project data: Duration of engagement plus 6 years for legal compliance
• Website analytics: 26 months

Children's Privacy

Our services are not directed at children under 16, and we do not knowingly collect personal data from children.

Right to Lodge a Complaint

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. Please review this page regularly for the latest information.