GDPR Compliance Statement
Last Updated: September 1, 2026
Our Commitment to Data Protection
magenta-tide.com is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we comply with these regulations and your rights as a data subject.
Data Controller Information
Data Controller: magenta-tide.com
Address: 47 Lever Street, Northern Quarter, Manchester M1 1FN, United Kingdom
Contact Email: [email protected]
As the data controller, we are responsible for determining how and why your personal data is processed.
What Personal Data We Collect
We collect and process the following categories of personal data:
- Identity Data: Names, titles, and other identifiers.
- Contact Data: Email addresses and correspondence records.
- Technical Data: IP addresses, browser types, device identifiers, and website usage data.
- Usage Data: Information about how you interact with our website and services.
- Marketing and Communications Data: Your preferences regarding marketing communications and service updates.
Lawful Basis for Processing
We only process your personal data when we have a lawful basis to do so under GDPR Article 6:
- Consent (Article 6(1)(a)): You have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications or accepting cookies.
- Contract (Article 6(1)(b)): Processing is necessary to fulfill a contract with you or to take steps at your request before entering into a contract.
- Legal Obligation (Article 6(1)(c)): Processing is necessary for compliance with legal obligations.
- Legitimate Interests (Article 6(1)(f)): Processing is necessary for our legitimate business interests, provided your rights do not override these interests.
Your Rights Under GDPR
Under GDPR, you have the following rights regarding your personal data:
1. Right of Access (Article 15)
You have the right to obtain confirmation of whether we are processing your personal data and to receive a copy of that data, along with information about how it is being processed.
2. Right to Rectification (Article 16)
You have the right to have inaccurate personal data corrected and incomplete data completed.
3. Right to Erasure (Article 17)
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes it was collected.
4. Right to Restrict Processing (Article 18)
You can request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data.
5. Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
6. Right to Object (Article 21)
You can object to the processing of your personal data in certain circumstances, particularly for direct marketing purposes or processing based on legitimate interests.
7. Rights Related to Automated Decision-Making (Article 22)
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects. We do not currently engage in such automated decision-making.
8. Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
How to Exercise Your Rights
To exercise any of the rights listed above, please contact us at [email protected]. We will respond to your request within one month, although this period may be extended by two additional months in complex cases. We will inform you of any such extension.
When submitting a request, please provide sufficient information to allow us to verify your identity and locate your data.
Data Security Measures
We have implemented appropriate technical and organizational security measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
- Encryption of data in transit and at rest.
- Access controls limiting data access to authorized personnel only.
- Regular security assessments and updates.
- Employee training on data protection and security practices.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the purpose of processing.
When personal data is no longer needed, we securely delete or anonymize it in accordance with our data retention policy.
International Data Transfers
We primarily store and process data within the United Kingdom and European Economic Area (EEA). If we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or transfers to countries with adequacy decisions.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also report qualifying breaches to the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, as required by GDPR.
Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate parental consent, we will take steps to delete that information.
Right to Lodge a Complaint
If you are not satisfied with how we have handled your personal data or your data protection rights, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
Updates to This Statement
We may update this GDPR Compliance Statement periodically to reflect changes in our data processing practices or legal requirements. We encourage you to review this page regularly for the latest information.
Contact Us
If you have questions about our GDPR compliance or wish to exercise your data protection rights, please contact us:
Email: [email protected]
Address: 47 Lever Street, Northern Quarter, Manchester M1 1FN, United Kingdom