Last updated: 1 September 2026
This page provides information about your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It supplements our Privacy Policy with specific details about GDPR compliance.
Data Controller
lotus-marten is the data controller responsible for your personal data. This means we determine the purposes and means of processing your personal information.
Contact details:
lotus-marten
45 George Street
Edinburgh EH2 2HT
United Kingdom
Email: [email protected]
Your Rights
Under data protection law, you have specific rights regarding your personal information:
Right to Be Informed
You have the right to be informed about how we collect and use your personal data. We provide this information through our Privacy Policy and this GDPR page.
Right of Access
You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
Right to Rectification
You can request correction of inaccurate or incomplete personal data. We will respond within one month and either make the correction or explain why we consider the data accurate.
Right to Erasure
You can request deletion of your personal data in certain circumstances, including:
- The data is no longer necessary for its original purpose
- You withdraw consent (where consent was the legal basis)
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restrict Processing
You can request that we limit how we use your data while investigating a complaint or verifying data accuracy.
Right to Data Portability
You can request a copy of your data in a structured, commonly used, machine-readable format to transfer to another organisation.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we demonstrate compelling legitimate grounds.
Rights Related to Automated Decision-Making
You have rights concerning decisions made about you without human involvement. We do not currently use automated decision-making that produces legal or similarly significant effects.
Lawful Bases for Processing
We process personal data under the following lawful bases:
- Consent: Where you have provided clear consent for specific processing activities
- Contract: Where processing is necessary to fulfil a contract with you or take steps at your request before entering a contract
- Legitimate Interest: Where processing is necessary for our legitimate business interests, balanced against your rights and freedoms
- Legal Obligation: Where processing is necessary to comply with legal requirements
Data Protection Principles
We adhere to the following principles when processing personal data:
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimisation
- Accuracy
- Storage limitation
- Integrity and confidentiality
- Accountability
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected] with your request. We may need to verify your identity before processing your request.
We will respond to most requests within one month. If your request is complex or we receive numerous requests, we may extend this by a further two months, in which case we will inform you within the initial month.
There is no fee for exercising your rights in most cases. However, we may charge a reasonable fee if your request is clearly unfounded or excessive, or we may refuse to comply in such circumstances.
Complaints
If you are unsatisfied with how we handle your personal data or your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: www.ico.org.uk
We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first.
Updates
We may update this GDPR information periodically. We encourage you to review this page regularly for any changes.