GDPR Compliance Statement

Last Updated: September 2026

Our Commitment to GDPR

VividReed is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognize the importance of protecting personal data and respecting individual privacy rights.

Data Controller Information

VividReed acts as the data controller for personal information collected through our website and business operations.

Contact: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases as defined by GDPR:

• Consent: When you provide explicit consent through form submissions or service requests
• Contract: When processing is necessary for fulfilling consulting service agreements
• Legitimate Interests: For business operations, website improvement, and communication purposes
• Legal Obligation: When required to retain records or comply with regulatory requirements

Data Subject Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when data is no longer necessary for the purposes collected.

Right to Restrict Processing

You may request limitation of processing in specific situations, such as when contesting data accuracy.

Right to Data Portability

You may request transfer of your personal data in a structured, commonly used format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended in complex cases.

Data Protection Principles

We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency in data processing
• Purpose limitation: data collected for specified, legitimate purposes
• Data minimization: only collecting data necessary for stated purposes
• Accuracy: keeping personal data accurate and up to date
• Storage limitation: retaining data only as long as necessary
• Integrity and confidentiality: implementing appropriate security measures

International Data Transfers

We do not routinely transfer personal data outside the United Kingdom. Should international transfers become necessary, we will ensure appropriate safeguards are in place as required by UK GDPR.

Data Breach Notification

In the event of a data breach likely to result in risk to individual rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not complied with data protection laws.

ICO Contact: https://ico.org.uk

Updates to This Statement

We may revise this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through website updates.