GDPR Compliance Statement

Last updated: August 4, 2026

This page explains how vibrant-swan.com complies with the UK General Data Protection Regulation (UK GDPR) and your rights regarding your personal data.

Data Controller

vibrant-swan.com is the data controller responsible for your personal information. Our contact details are:

Email: [email protected]
Address: 43 Deansgate, Manchester, M3 2AY, United Kingdom

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data under certain conditions, such as when:

The data is no longer necessary for the purpose it was collected
You withdraw your consent
You object to the processing and there are no overriding legitimate grounds
The data has been unlawfully processed

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions.

Right to Object

You have the right to object to our processing of your personal data under certain conditions, particularly for direct marketing purposes.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Lawful Basis for Processing

We process your personal data under the following lawful bases:

Consent: When you provide explicit consent for specific processing activities
Contract: When processing is necessary for a contract we have with you
Legal obligation: When we must process your data to comply with the law
Legitimate interests: When we have a legitimate business interest, provided your rights do not override those interests

Data Protection Principles

We adhere to the following data protection principles:

Lawfulness, fairness, and transparency in processing
Purpose limitation - data collected for specified, explicit purposes
Data minimization - only collecting data that is necessary
Accuracy - keeping data up to date
Storage limitation - retaining data only as long as necessary
Integrity and confidentiality - appropriate security measures

International Data Transfers

We do not transfer your personal data outside the United Kingdom. If this changes in the future, we will ensure appropriate safeguards are in place and inform you accordingly.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, as required by UK GDPR.

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us at [email protected]. We will respond to your request within one month. If your request is complex, we may extend this period by two further months and will inform you of any such extension.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Tel: 0303 123 1113
Website: www.ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date.