Our commitment to protecting your data rights under UK GDPR.
Last updated: October 2026
Beige-isle is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle personal data in accordance with these regulations and outlines your rights as a data subject.
Beige-isle acts as the data controller for personal information collected through this website and our consulting services. As a data controller, we are responsible for deciding how personal data is collected and processed.
Contact details:
Beige-isle
47 Deansgate
Manchester, M3 2BW
United Kingdom
Email: [email protected]
Under the UK GDPR, we must have a valid lawful basis to process personal data. We rely on the following legal bases:
Where you have given clear consent for us to process your personal data for a specific purpose. For example, when you subscribe to our newsletter or submit a contact form.
Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract. This applies when you engage our consulting services.
Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights. We rely on this basis for activities such as improving our website and services.
Where processing is necessary for us to comply with a legal obligation, such as tax or regulatory requirements.
Under the UK GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
You have the right to request correction of any inaccurate personal data we hold about you. You also have the right to have incomplete data completed.
You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. We do not currently use automated decision-making processes.
To exercise any of these rights, please contact us using the details provided above. We may need to verify your identity before processing your request. We will respond to your request within one month, though this period may be extended in certain circumstances.
There is no fee for exercising your rights, unless your request is manifestly unfounded or excessive.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. The specific retention period depends on the nature of the data and our legal obligations. When data is no longer required, it is securely deleted or anonymised.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
If we transfer personal data outside the UK, we ensure that appropriate safeguards are in place to protect the data in accordance with UK GDPR requirements. This may include using standard contractual clauses approved by the Information Commissioner's Office.
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to individuals, we will also notify the affected individuals directly.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance information from time to time. When changes are made, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically for any changes.
If you have questions about our GDPR compliance or data protection practices, please contact us at:
Beige-isle
47 Deansgate
Manchester, M3 2BW
United Kingdom
Email: [email protected]