GDPR Compliance Notice

Last updated: 2026-07-08

This notice supplements our Privacy Policy for visitors in the European Union / European Economic Area under the General Data Protection Regulation (GDPR).

Lawful bases for processing

We process personal data under the following bases: consent (cookies and marketing measurement where required), legitimate interest (site operation, security, aggregate analytics), and contract (responding to requests you make).

Your rights

You have the right to: access the personal data we hold about you; rectify inaccurate data; erase your data ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent at any time without affecting prior processing.

Exercising your rights

Submit any request through our contact form. We respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

International transfers

Data may be processed on servers outside the EU/EEA. Where that occurs, we rely on appropriate safeguards such as Standard Contractual Clauses provided by our hosting and analytics providers.

Data minimisation & retention

We collect only what is needed for the purposes described in our Privacy Policy and retain it no longer than necessary.