GDPR Compliance
Last Updated: September 29, 2026
Our Commitment to GDPR
Garnet-atoll is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you submit a form or agree to cookies
- Contractual necessity: To provide services you've requested
- Legitimate interests: To improve our services and website functionality
Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access: Request copies of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your personal data
- Right to restrict processing: Request limitation of how we use your data
- Right to data portability: Receive your data in a structured format
- Right to object: Object to processing based on legitimate interests
Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Inquiry data is typically retained for three years unless you request earlier deletion.
International Data Transfers
Your personal data is processed within the United Kingdom. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place.
Data Controller
Garnet-atoll acts as the data controller for personal information collected through this website. Our contact details:
Email: [email protected]
Address: 47 Victoria Embankment, London EC4Y 0DZ, United Kingdom
Exercising Your Rights
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within 30 days.
Right to Lodge a Complaint
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom.