GDPR Compliance

jolly-soar is committed to protecting the privacy and personal data of individuals in accordance with the General Data Protection Regulation (GDPR) and applicable United Kingdom data protection legislation.

Data Controller Information

For the purposes of data protection legislation, jolly-soar acts as the data controller for personal information collected through this website and in the course of providing our professional services.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit enquiries through our contact forms
• Contract performance: When providing services to engaged clients
• Legitimate interests: For business operations and service improvement
• Legal obligation: Where required to comply with applicable laws and regulations

Data Processing Activities

We collect and process the following categories of personal data:

• Contact information (name, email address, postal address)
• Project-related information provided in enquiries and correspondence
• Technical data from website usage (cookies, IP addresses, browser information)

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request confirmation of whether we process your personal data and obtain a copy of that data
• Right to rectification: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of personal data in certain circumstances
• Right to restriction: Request limitation of processing activities in specific situations
• Right to data portability: Receive personal data in a structured, commonly used format
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes
• Rights related to automated decision-making: Not be subject to decisions based solely on automated processing

Exercising Your Rights

To exercise any of these rights, please submit a written request to [email protected]. We will respond to valid requests within one month of receipt, or within two months for complex requests.

We may require verification of your identity before fulfilling requests to ensure data security and prevent unauthorized disclosure.

Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable legal obligations. Retention periods vary depending on the nature of the data and the purpose of processing.

When personal data is no longer required, it is securely deleted or anonymized in accordance with our data retention and disposal procedures.

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Staff training on data protection practices

Third-Party Data Processors

We may engage third-party service providers to process personal data on our behalf for specific purposes such as website hosting or email communications. All such processors are contractually obligated to implement appropriate security measures and process data only in accordance with our instructions.

International Data Transfers

Personal data is primarily processed within the United Kingdom. If data is transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters.

ICO contact details:
Website: www.ico.org.uk
Telephone: 0303 123 1113

Updates to This Statement

This GDPR compliance statement may be updated periodically to reflect changes in our data processing activities or legal requirements. Material changes will be communicated through our website.

Last updated: September 2026