GDPR Compliance

Last updated: September 2024

Our Commitment to Data Protection

mellow-petal is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.

Lawful Basis for Processing

We process personal data on the following legal grounds:

• Legitimate interests: To respond to consultation inquiries and provide information about our services
• Consent: Where you have explicitly agreed to receive communications
• Contractual necessity: To fulfill obligations related to our consulting engagements

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data under certain circumstances
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data to another organisation
• Right to object: Object to processing of your personal data
• Rights related to automated decision making: Protection from decisions based solely on automated processing

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When personal data is no longer required, we securely delete or anonymise it.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.

International Data Transfers

Your personal data is processed and stored within the United Kingdom. We do not transfer personal data outside the UK or European Economic Area.

Exercising Your Rights

To exercise any of your GDPR rights or raise concerns about data processing, contact us at [email protected]. We will respond to requests within one month of receipt.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues, if you believe your data protection rights have been violated.