Last updated: 1 September 2026
This page provides information about how stormy-vale complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to protecting your personal data and being transparent about how we process it.
stormy-vale acts as the data controller for personal data collected through this website and in connection with our consultancy services. As data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection legislation.
Contact details:
stormy-vale
47 Chancery Lane
London WC2A 1PL
United Kingdom
Email: [email protected]
We process personal data only where we have a lawful basis to do so. The lawful bases we rely upon include:
Where you have given clear consent for us to process your personal data for specific purposes. You may withdraw consent at any time by contacting us.
Where processing is necessary for the performance of a contract with you, or to take steps at your request prior to entering into a contract. This includes processing data to provide our consultancy services.
Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. Our legitimate interests include:
Where processing is necessary for compliance with a legal obligation to which we are subject.
The UK GDPR provides you with the following rights regarding your personal data:
You have the right to be informed about how we collect and use your personal data. This notice, together with our Privacy Policy, fulfils this obligation.
You have the right to obtain confirmation that your data is being processed and to access your personal data. You may request a copy of the personal data we hold about you.
You have the right to have inaccurate personal data rectified and incomplete data completed.
You have the right to have your personal data erased in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent.
You have the right to request restriction of processing in certain circumstances, such as where you contest the accuracy of your data or object to processing based on legitimate interests.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where processing is based on consent or contract and carried out by automated means.
You have the right to object to processing based on legitimate interests, direct marketing, and processing for research or statistical purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects. We do not currently engage in automated decision-making of this nature.
To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.
We may request specific information from you to help us confirm your identity and ensure your right to access your personal data or exercise other rights. This is a security measure to ensure personal data is not disclosed to any person who has no right to receive it.
Where our processing activities are likely to result in a high risk to the rights and freedoms of individuals, we conduct Data Protection Impact Assessments to identify and minimise data protection risks.
Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place. These may include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time. The date of the most recent revision appears at the top of this page. We encourage you to review this information periodically to stay informed about how we protect your data.