GDPR Compliance Statement

Last updated: July 2026

Our Commitment

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you submit a consultation request, you provide explicit consent for us to process your information
• Contractual Necessity: Processing is necessary to fulfill the services you've requested
• Legitimate Interests: We may process data for business operations that don't override your rights

Data Controller

The data controller responsible for your personal information is:
dune-atom
47 King Street
Manchester, M2 4LQ
United Kingdom

Your GDPR Rights

Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used format.

Right to Rectification

If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes it was collected, or when you withdraw consent.

Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling processes that produce legal effects concerning you.

Exercising Your Rights

To exercise any of these rights, contact us at: [email protected]

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of such extension.

Data Protection Officer

For questions specifically about data protection practices, you may contact our designated representative at: [email protected]

Supervisory Authority

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

International Data Transfers

Your personal data is processed and stored within the United Kingdom. We do not transfer data outside the UK or European Economic Area.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.