Last updated: September 8, 2026
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
For the purposes of GDPR, the data controller is:
reefreed
42 Ecclesall Road South
Sheffield, S11 9PL
United Kingdom
Email: [email protected]
We process personal data under the following lawful bases:
When you submit enquiry forms or contact us, you provide explicit consent for us to process your data to respond to your request.
Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request before entering into a contract.
We process certain data based on legitimate business interests, such as improving our services and maintaining business records, while ensuring your rights and freedoms are protected.
You have the right to obtain confirmation that we process your personal data and to access that data. You may request a copy of your data at any time.
You have the right to have inaccurate personal data corrected. You may also request completion of incomplete data.
Under certain circumstances, you have the right to request deletion of your personal data. This right is not absolute and may be subject to legal retention requirements.
You may request restriction of processing in specific circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
We do not engage in automated decision making or profiling that produces legal effects or similarly significant effects.
To exercise any of your GDPR rights, contact us at [email protected] with your request. Please include:
Response Time: We will respond to your request within one month of receipt. In complex cases, this period may be extended by two additional months, and we will inform you of any such extension.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach.
We primarily process data within the United Kingdom. If we transfer data outside the UK or European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
For questions specifically related to data protection and GDPR compliance, you may contact us at [email protected]
You have the right to lodge a complaint with the supervisory authority if you believe we have not complied with GDPR requirements. In the UK, the supervisory authority is:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
We regularly review our data protection practices to ensure ongoing compliance with GDPR. Any material changes will be reflected in this document with an updated revision date.