We use cookies to improve your experience. By continuing to use this site, you agree to our use of cookies.

laurelreach
Information on this site is advertising in nature
  • Home
  • About
  • Services
  • Contact

GDPR Compliance Statement

Last updated: September 8, 2026

This document outlines how laurelreach.com complies with the General Data Protection Regulation (GDPR) and explains your rights regarding the processing of your personal data.

Our Commitment to Data Protection

We are committed to protecting your personal data and respecting your privacy rights under the GDPR. We process personal data lawfully, fairly, and transparently, and only for specified, explicit, and legitimate purposes.

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

  • Consent: You have given clear consent for us to process your personal data for specific purposes
  • Contract: Processing is necessary for the performance of a contract with you
  • Legal obligation: Processing is necessary to comply with legal requirements
  • Legitimate interests: Processing is necessary for our legitimate business interests, provided these do not override your rights

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request access to your personal data and receive information about how we process it.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when it is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights: To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended by two months for complex requests.

Data We Collect

We collect and process the following categories of personal data:

  • Identity data: name, title, organization details
  • Contact data: email address, postal address
  • Technical data: IP address, browser type, device information
  • Usage data: information about how you use our website and services
  • Marketing and communications data: your preferences for receiving communications

How We Use Your Data

We use your personal data for the following purposes:

  • To provide environmental consulting services
  • To communicate with you about our services
  • To improve our website and service offerings
  • To comply with legal and regulatory obligations
  • To protect our legitimate business interests

Data Sharing

We may share your personal data with:

  • Service providers who assist in our operations
  • Professional advisers including lawyers and accountants
  • Regulatory authorities when required by law

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom and European Economic Area. If we transfer your data outside these regions, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Data Security

We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication procedures
  • Staff training on data protection

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the purpose for which it was collected.

Automated Decision-Making

We do not use your personal data for automated decision-making, including profiling, which produces legal effects or similarly significantly affects you.

Complaints

If you believe we have not complied with your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Contact Our Data Protection Officer

For any questions about our GDPR compliance or to exercise your rights, please contact:

Email: [email protected]
Address: 42 Waterside Lane, Leicester LE1 4TG, United Kingdom

Changes to This Statement

We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date.

laurelreach

Environmental consulting for sustainable futures

Navigation

  • About
  • Services
  • Contact

Legal

  • Privacy Policy
  • GDPR
  • Cookies Policy
  • Terms of Use

Disclaimer: The information and services provided are not intended to replace professional environmental assessments or regulatory compliance obligations. Results may vary depending on organizational context, industry sector, and implementation commitment. We recommend consulting with relevant regulatory authorities before making significant operational changes. Individual outcomes depend on numerous factors beyond our direct control.

© 2026 laurelreach.com. All rights reserved.