Last updated: 21 July 2026
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws. This page explains how we comply with these regulations.
The data controller for your personal information is:
keen-reef
42 Woodland Gardens
Bristol BS8 2NE
United Kingdom
Email: [email protected]
We process personal data under the following legal bases:
Under GDPR, you have the following rights regarding your personal data:
You can request a copy of the personal data we hold about you. We will provide this information within one month of your request.
If your personal information is inaccurate or incomplete, you have the right to request that we correct or complete it.
You can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected.
You can request that we limit how we use your personal data in specific situations.
You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
You can object to processing of your personal data when we rely on legitimate interests as the legal basis.
Where we process data based on consent, you can withdraw that consent at any time.
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data properly.
To exercise any of these rights, contact us using the details provided above. We will respond to your request within one month. In complex cases, this may be extended by two additional months.
We implement appropriate technical and organisational measures to ensure data security, including:
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.
Your personal data is processed within the United Kingdom and European Economic Area. Any transfers outside these regions will be protected by appropriate safeguards as required by GDPR.
We do not use automated decision making or profiling that produces legal effects or similarly significant effects on individuals.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods are:
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children.
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.
For questions about our GDPR compliance or to exercise your rights, contact us at [email protected] or write to the address provided above.