GDPR Information

Last updated: September 2026

About UK GDPR

The UK General Data Protection Regulation (UK GDPR), together with the Data Protection Act 2018, governs how organisations collect, use, and protect personal information in the United Kingdom. Delta-lunar is committed to full compliance with these regulations.

Data Controller Information

Delta-lunar acts as the data controller for personal information collected through our website and services. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection legislation.

Contact details for data protection matters:
Delta-lunar
47 Pemberton Street
Bristol, BS1 5QR
[email protected]

Lawful Bases for Processing

We process personal data only where we have a valid lawful basis. The lawful bases we rely upon include:

Consent

Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications. You may withdraw consent at any time.

Contract

Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract. This includes processing required to deliver our assessment, installation, and monitoring services.

Legal Obligation

Processing necessary for compliance with legal obligations, such as maintaining financial records for tax purposes or responding to lawful requests from authorities.

Legitimate Interests

Processing necessary for our legitimate interests or those of third parties, provided your interests and fundamental rights do not override those interests. Examples include improving our services, preventing fraud, and ensuring network security.

Vital Interests

In emergency situations, particularly regarding our monitoring services, we may process data where necessary to protect the vital interests of you or another person.

Your Data Subject Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Be Informed

You have the right to be informed about how we collect and use your personal data. This GDPR notice and our Privacy Policy fulfil this obligation.

Right of Access

You have the right to request access to your personal data. This is commonly known as a Subject Access Request (SAR). We will respond within one month of receiving your request.

Right to Rectification

You have the right to have inaccurate personal data corrected or completed if it is incomplete. We will respond within one month.

Right to Erasure

Also known as the right to be forgotten, you can request deletion of your personal data in certain circumstances, including where the data is no longer necessary for its original purpose or where you withdraw consent.

Right to Restrict Processing

You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of data or object to processing pending verification of legitimate grounds.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used format and to have it transmitted to another controller.

Right to Object

You have the right to object to processing based on legitimate interests, direct marketing, and processing for research or statistical purposes.

Rights Related to Automated Decision-Making

You have rights related to automated decision-making and profiling. We do not currently use automated decision-making that produces legal effects concerning you.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] or write to our address above. We will respond to your request within one month. In complex cases or where we receive numerous requests, this period may be extended by a further two months, in which case we will inform you within the first month.

We do not charge a fee for most requests. However, we may charge a reasonable fee if a request is clearly unfounded or excessive, or we may refuse to comply with the request in such circumstances.

Data Protection Officer

We have appointed a Data Protection Officer responsible for overseeing compliance with data protection obligations. You may contact the DPO at [email protected] for any matters relating to your personal data.

Data Breaches

We have procedures in place to detect, investigate, and report personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

International Data Transfers

We primarily process data within the United Kingdom. Where transfers outside the UK are necessary, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Complaints

If you have concerns about how we handle your personal data, please contact us first so we can address your concerns. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
ico.org.uk

Updates

We review and update our data protection practices regularly. Changes to this notice will be published on our website with the updated date shown at the top of the page.