GDPR Compliance

Last updated: August 14, 2026

Our Commitment to Data Protection

seed-wave is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Lawful Basis for Processing

We process your personal data based on the following lawful grounds:

• Contract: Processing is necessary to fulfil our service agreement with you
• Legitimate interests: To maintain business records and improve service quality
• Legal obligation: To comply with accounting and tax requirements

Your Data Protection Rights

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.

Right to Rectification

You can request that we correct information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You can request deletion of your personal data under certain conditions, such as when the data is no longer necessary for the purposes it was collected.

Right to Restrict Processing

You can request that we restrict processing of your personal data under certain circumstances.

Right to Object

You have the right to object to our processing of your personal data under certain conditions.

Right to Data Portability

You can request transfer of your data to another organisation or directly to you under certain conditions.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]

We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two months and will inform you accordingly.

Data Security Measures

We implement appropriate technical and organisational measures including:

• Secure storage systems with restricted access
• Regular security assessments and updates
• Staff training on data protection practices
• Encrypted transmission of sensitive information

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

We do not transfer your personal data outside the United Kingdom.

Complaints

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Helpline: 0303 123 1113

Contact Information

For any questions regarding GDPR compliance or to exercise your rights, contact us at [email protected]