GDPR Compliance

Last updated: June 10, 2026

Our Commitment to Data Protection

quaint-bamboo.net is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This document outlines how we comply with GDPR requirements and respect your data rights.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you explicitly agree to provide information through forms or opt-in to communications
• Contractual Necessity: When processing is necessary to provide services you have requested
• Legitimate Interests: When we have valid business reasons that do not override your rights
• Legal Obligations: When we must process data to comply with legal requirements

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure

You can request deletion of your personal data under certain circumstances, including when data is no longer necessary for its original purpose.

Right to Restriction

You can request limitation of how we process your data in specific situations.

Right to Data Portability

You can receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have rights regarding automated individual decision-making, including profiling. We do not currently use automated decision-making processes.

Data Protection Officer

For matters related to data protection, you can contact us at [email protected]

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

We primarily process data within the United Kingdom. Any international transfers are conducted with appropriate safeguards in place, such as standard contractual clauses.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with:

• Your full name and contact details
• Specific right you wish to exercise
• Any relevant details about your request

We will respond to your request within one month, though this may be extended in complex cases.

Right to Lodge a Complaint

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom.

Data Retention Periods

We retain personal data only as long as necessary for the purposes stated in our Privacy Policy. Specific retention periods depend on the nature of the data and legal requirements.