GDPR Compliance Statement

Last updated: 30 September 2026

Our Commitment to GDPR

swiftgrouse is committed to protecting personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. This statement outlines how we comply with data protection principles and respect the rights of data subjects.

Data Controller

swiftgrouse acts as the data controller for personal information collected through this website. We determine the purposes and means of processing personal data and are responsible for ensuring compliance with applicable data protection laws.

Data Protection Principles

We process personal data in accordance with the following principles:

Lawfulness, fairness and transparency: Data is processed lawfully with clear information provided to data subjects
Purpose limitation: Data is collected for specified, explicit purposes and not used in ways incompatible with those purposes
Data minimisation: Only data adequate and relevant to the stated purposes is collected
Accuracy: Reasonable steps are taken to ensure data is accurate and kept up to date
Storage limitation: Data is retained only as long as necessary for the processing purposes
Integrity and confidentiality: Appropriate security measures protect data against unauthorised processing and accidental loss
Accountability: We demonstrate compliance with these principles through documentation and policies

Your GDPR Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of Access

You can request a copy of the personal data we hold about you. We will provide this information within one month of receiving a valid request.

Right to Rectification

You can request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You can request deletion of your personal data in certain circumstances, such as when data is no longer necessary for the original purpose or you withdraw consent.

Right to Restrict Processing

You can request that we limit how we use your data in specific situations, such as when you contest data accuracy.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used format for transfer to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please send a written request to [email protected]. Include the following information:

Your full name and contact details
A clear description of which right you wish to exercise
Any relevant details that will help us locate your data

We will respond to requests within one month. In complex cases, this period may be extended by two additional months, in which case we will inform you of the extension and the reasons for delay.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk. These measures include secure data storage, access controls, encryption where appropriate, and regular security assessments.

Data Breach Notification

In the event of a data breach that poses a risk to the rights and freedoms of individuals, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals without undue delay.

Complaints

If you believe we have not handled your personal data in accordance with GDPR requirements, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

ICO contact details:
Website: www.ico.org.uk
Telephone: 0303 123 1113

Contact

For questions about GDPR compliance or to exercise your rights, contact us at [email protected].