GDPR Compliance
Last updated: June 19, 2026
Our Commitment to Data Protection
We are committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: When you provide explicit consent for specific processing activities
- Contract: When processing is necessary to fulfill our contractual obligations to you
- Legal Obligation: When we must process data to comply with legal requirements
- Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.
Right to Rectification
You have the right to request correction of any information you believe is inaccurate or incomplete.
Right to Erasure
You have the right to request deletion of your personal data under certain circumstances.
Right to Restrict Processing
You have the right to request restriction of processing your personal data under certain conditions.
Right to Object
You have the right to object to our processing of your personal data under certain circumstances.
Right to Data Portability
You have the right to request transfer of your data to another organization or directly to you under certain conditions.
Data Controller
The data controller responsible for your personal data is:
geyser-craft
45 Wellington Street
Leeds LS1 4JF
United Kingdom
[email protected]
Data Protection Officer
For questions about our data protection practices or to exercise your GDPR rights, please contact us at the address above.
International Data Transfers
If we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us using the information provided above. We will respond to your request within one month, though this may be extended by two additional months for complex requests.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. In the UK, the supervisory authority is the Information Commissioner's Office (ICO).