GDPR Information
Last updated: August 19, 2026
General Data Protection Regulation Compliance
feral-reef is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
Data Controller
feral-reef acts as the data controller for the personal information collected through our website and services.
Contact: info@feral-reef.com
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you provide explicit consent for specific processing activities
- Contract: When processing is necessary to fulfill our service obligations to you
- Legal Obligation: When we must process data to comply with legal requirements
- Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights
Your GDPR Rights
Right to Access
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data.
Right to Rectification
You can request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing
You can request that we limit the processing of your personal data in specific situations.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
We do not use automated decision-making or profiling in our services.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us at info@feral-reef.com with your specific request. We will respond to your request within one month.
Data Protection Officer
Given the scale and nature of our operations, we are not required to appoint a Data Protection Officer. However, our management team oversees GDPR compliance.
International Data Transfers
We primarily process data within the United Kingdom. If we transfer data outside the UK or European Economic Area, we ensure appropriate safeguards are in place.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.
Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: ico.org.uk
Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy, unless a longer retention period is required by law.
- Service request information: 3 years from last contact
- Client engagement records: 6 years from service completion
- Marketing consent records: Until consent is withdrawn
- Website analytics: 26 months
Children's Data
We do not knowingly collect or process personal data from individuals under 18 years of age.
Updates to This Information
We may update this GDPR information to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the most recent changes were made.