GDPR Compliance

Last updated: 1 June 2026

Our Commitment

fell-vector is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the security and privacy of your personal data seriously and have implemented appropriate measures to protect it.

Data Controller

fell-vector acts as the data controller for personal information collected through this website and our business operations. We determine the purposes and means of processing your personal data.

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so. The legal bases we rely upon include:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract or to take steps prior to entering into a contract
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights
• Legal obligation: Where processing is necessary to comply with legal requirements

Your Rights Under GDPR

Under UK GDPR, you have the following rights regarding your personal data:

• Right to be informed: You have the right to be told how your personal data is being used
• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your data in certain circumstances
• Right to restrict processing: You can request that we limit how we use your data
• Right to data portability: You can request your data in a machine-readable format
• Right to object: You can object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making: You have rights regarding decisions made without human involvement

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the details below. We will respond to your request within one month. In complex cases, we may extend this by a further two months, in which case we will inform you.

We may need to verify your identity before processing your request. We will not charge a fee for fulfilling reasonable requests, but may charge a reasonable fee for manifestly unfounded or excessive requests.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest where appropriate
• Regular assessment of our security measures
• Staff training on data protection
• Access controls to limit data access to authorised personnel

Data Breach Procedures

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. If the breach is likely to result in a high risk, we will also notify affected individuals without undue delay.

International Transfers

We do not routinely transfer personal data outside the United Kingdom. Where international transfers are necessary, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Protection Officer

Given the nature and scale of our processing activities, we are not required to appoint a Data Protection Officer. However, we have designated a point of contact for data protection matters.

Complaints

If you are not satisfied with how we handle your personal data or your data protection request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

Contact Us

For data protection enquiries or to exercise your rights, contact us at:

Email: [email protected]
Address: 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom