GDPR Compliance

Data Controller Information

For the purposes of GDPR, the data controller is:

glacier-logic
42 Sunbridge Road
Bradford, West Yorkshire
BD1 2AE
United Kingdom

Contact: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases as defined by GDPR:

• Consent: When you submit service requests through our website, you provide explicit consent for us to process the information you supply
• Contractual necessity: Processing is necessary to fulfill the advisory services you have requested
• Legitimate interests: We may process data for business administration, record-keeping, and service improvement purposes where such processing does not override your fundamental rights

Types of Personal Data Processed

We collect and process the following categories of personal data:

• Identity data: name
• Contact data: email address
• Communication data: service inquiries, messages, and correspondence
• Service preference data: selected services and stated property requirements

We do not process special categories of personal data as defined under GDPR Article 9.

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You have the right to request confirmation of whether we process your personal data and to receive a copy of such data along with supplementary information about the processing.

Right to Rectification

You have the right to request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure

You have the right to request deletion of your personal data where one of the following grounds applies:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent on which processing is based
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Erasure is necessary for compliance with a legal obligation

Right to Restriction of Processing

You have the right to request restriction of processing where one of the following applies:

• You contest the accuracy of the personal data
• Processing is unlawful but you prefer restriction over erasure
• We no longer need the data but you require it for legal claims
• You have objected to processing pending verification of legitimate grounds

Right to Data Portability

Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data where processing is based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Rights Related to Automated Decision-Making

We do not engage in automated decision-making or profiling as defined under GDPR Article 22.

How to Exercise Your Rights

To exercise any of the rights outlined above, submit a request to [email protected] with the following information:

• Your full name and email address used in previous communications
• Specific right you wish to exercise
• Details of your request

We will respond to your request within one month of receipt. In complex cases, this period may be extended by two additional months, in which case we will inform you of the extension and reasons within the initial one-month period.

Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable legal obligations.

Client consultation records are retained for two years following the last interaction. After this period, data is either deleted or anonymized unless legal requirements mandate longer retention.

International Data Transfers

Personal data collected through this website is stored and processed within the United Kingdom. We do not transfer personal data outside the UK or European Economic Area.

Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorized personnel only
• Regular security assessments and updates
• Employee training on data protection practices

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and, where feasible, within 72 hours of becoming aware of the breach.

Right to Lodge a Complaint

If you believe our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority.

In the United Kingdom, the supervisory authority is the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: ico.org.uk

Updates to This Notice

This GDPR compliance notice may be updated to reflect changes in our data processing practices or legal requirements. The effective date indicates when the notice was last revised.