GDPR Compliance

Our Commitment to GDPR

glacier-reach is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements.

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: When you submit a consultation request or contact form, you provide explicit consent for us to process your data for the stated purposes
• Legitimate Interests: We may process data where necessary for our legitimate business interests, provided these do not override your rights and freedoms
• Contractual Necessity: Processing necessary to fulfil our contractual obligations when providing consultation services

Data We Collect

We only collect personal data that is necessary for providing our services:

• Contact information (name, email address)
• Information about your energy needs and property that you voluntarily provide
• Service preferences and consultation requests

How We Protect Your Data

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorised personnel only
• Regular security assessments and updates
• Staff training on data protection principles

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You have the right to request correction of inaccurate personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to processing of your personal data in certain circumstances.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling in our processing of personal data.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Consultation enquiries: retained for up to 2 years after the last contact
• Client project data: retained for up to 6 years to comply with legal and accounting requirements
• Marketing consent data: retained until consent is withdrawn

International Data Transfers

Your personal data is processed and stored within the United Kingdom and European Economic Area. We do not transfer personal data outside these regions.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Address: 47 Kingsway Boulevard, Manchester M2 4HG, United Kingdom

We will respond to your request within one month. In some cases, we may extend this period by a further two months where requests are complex or numerous.

Right to Lodge a Complaint

If you believe we have not complied with GDPR requirements, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.

ICO Contact Details:
Website: www.ico.org.uk
Helpline: 0303 123 1113

Updates to This Policy

We may update this GDPR compliance statement from time to time. Any changes will be posted on this page.