GDPR Compliance

Last updated: June 2026

Our Commitment to GDPR

fell-dolphin is committed to ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of personal data seriously and have implemented measures to ensure that personal data is processed lawfully, fairly, and transparently.

Data Controller Information

For the purposes of data protection legislation, fell-dolphin acts as the data controller for personal data collected through this website and our services. Our contact details are:

fell-dolphin
47 Westbourne Grove
London W2 4UA
United Kingdom

Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases as defined by the GDPR:

• Contract: Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legitimate Interests: Processing necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms
• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Legal Obligation: Processing necessary for compliance with a legal obligation

Your Rights Under GDPR

The GDPR provides you with specific rights regarding your personal data:

Right to Be Informed

You have the right to be informed about the collection and use of your personal data. This GDPR page and our Privacy Policy provide this information.

Right of Access

You have the right to request access to your personal data and supplementary information. We will provide a copy of the personal data we hold about you free of charge, though we may charge a reasonable fee for additional copies.

Right to Rectification

You have the right to have inaccurate personal data rectified or completed if it is incomplete. We aim to respond to rectification requests within one month.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected, or when you withdraw consent.

Right to Restrict Processing

You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects you. We do not currently engage in such automated decision-making.

Data Protection Principles

We adhere to the following data protection principles:

• Personal data shall be processed lawfully, fairly, and transparently
• Personal data shall be collected for specified, explicit, and legitimate purposes
• Personal data shall be adequate, relevant, and limited to what is necessary
• Personal data shall be accurate and kept up to date
• Personal data shall be kept for no longer than necessary
• Personal data shall be processed securely

International Transfers

We primarily store and process personal data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place to protect your data, such as Standard Contractual Clauses or adequacy decisions.

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach and will communicate the breach to affected individuals without undue delay.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us using the details above. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by a further two months, in which case we will inform you.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. The ICO can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF