GDPR Compliance

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. Although the UK has left the EU, the UK GDPR continues to apply. At wildflower-venture, we are committed to complying with these regulations and protecting your personal data.

Who We Are

wildflower-venture is the data controller responsible for your personal data. Our contact details are:

wildflower-venture
42 Learmonth Terrace
Edinburgh EH4 1PG
United Kingdom
Email: [email protected]

Your Rights Under GDPR

Under the GDPR and UK data protection law, you have the following rights:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request. In certain circumstances, we may charge a reasonable fee or refuse the request if it is manifestly unfounded or excessive.

Right to Rectification

If you believe any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. We will respond to your request within one month.

Right to Erasure

Also known as the "right to be forgotten," you can request that we delete your personal data in certain circumstances, including:

• The data is no longer necessary for the purpose we collected it
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restrict Processing

You can request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or have objected to processing.

Right to Data Portability

Where we process your data based on consent or contract performance, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer this data directly to another controller where technically feasible.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. If you object to marketing, we will stop processing your data for that purpose immediately.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect you. We do not currently use automated decision-making in our services.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to all legitimate requests within one month. If your request is particularly complex or you have made multiple requests, we may extend this period by two months, but we will inform you within one month if this is the case.

Data Protection Principles

We adhere to the following principles when processing your personal data:

• Lawfulness, fairness, and transparency: We process data lawfully and transparently
• Purpose limitation: We collect data for specified, explicit purposes
• Data minimisation: We only collect data that is necessary
• Accuracy: We keep data accurate and up to date
• Storage limitation: We don't keep data longer than necessary
• Integrity and confidentiality: We protect data appropriately

International Data Transfers

We primarily store and process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. If the breach is likely to result in a high risk, we will also notify you directly without undue delay.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: wildflower-venture.com

Updates to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated date.

Last updated: May 2026