GDPR Compliance
Last updated: 3 November 2026
Our Commitment to Data Protection
Prime-ash is committed to full compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We take your privacy seriously and have implemented measures to ensure your personal data is processed lawfully, fairly, and transparently.
Data Controller
For the purposes of GDPR, Prime-ash is the data controller responsible for your personal information.
Contact details:
Prime-ash
142 Cavendish Street
London, W1G 9RD
United Kingdom
Email: [email protected]
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request access to the personal data we hold about you. We will provide you with a copy of your data in a commonly used electronic format.
Right to Rectification
If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that data.
Right to Erasure
You have the right to request deletion of your personal data where there is no compelling reason for its continued processing.
Right to Restrict Processing
You can request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis for processing.
Right to Withdraw Consent
Where we are processing your data based on consent, you have the right to withdraw that consent at any time.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended by two further months in complex cases.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. When data is no longer required, it is securely deleted or anonymised.
Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Access controls limiting who can view personal data
- Regular security assessments and updates
- Staff training on data protection requirements
Data Breaches
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.
International Data Transfers
We do not transfer personal data outside the United Kingdom or European Economic Area. Should this change, we will ensure appropriate safeguards are in place.
Complaints
If you have concerns about how we process your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.
ICO contact details:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk