Your rights under the General Data Protection Regulation.
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. Although the United Kingdom has left the European Union, we continue to adhere to GDPR principles and the UK GDPR as implemented through the Data Protection Act 2018.
dune-seal is the data controller for personal information collected through this website. This means we determine the purposes and means of processing your personal data. We are committed to protecting your privacy and handling your data in an open and transparent manner.
We process personal data under the following legal bases:
Under GDPR, you have the following rights regarding your personal data:
You have the right to be informed about the collection and use of your personal data. This privacy information explains what personal data we collect, how we use it, and your rights in relation to it.
You have the right to request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
You have the right to request that we correct any inaccurate personal data we hold about you and to have any incomplete personal data completed.
You have the right to request that we delete or remove your personal data in certain circumstances. This is also known as the "right to be forgotten".
You have the right to request that we restrict the processing of your personal data in certain circumstances. This means we can continue to store your data but not further process it.
You have the right to request that we transfer your personal data to you or to another organisation in a commonly used, machine-readable format.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of your rights, or if you have any questions about how we process your personal data, please contact us at [email protected]. We will respond to your request within one month of receiving it. In some cases, we may need to verify your identity before processing your request.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, and applicable legal requirements.
We do not routinely transfer personal data outside the United Kingdom. If such transfers become necessary, we will ensure appropriate safeguards are in place to protect your personal data in accordance with applicable data protection law.
We have implemented appropriate technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.
If you are unhappy with any aspect of how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to address your concerns before you approach the ICO, so please contact us in the first instance.
For any questions regarding this GDPR policy or our data practices, please contact us at [email protected].
Last updated: September 2026