GDPR Compliance

Last Updated: June 2026

Our Commitment

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Legal Basis for Processing

We process your personal data under the following legal bases:

Data Controller

The data controller responsible for your personal information is vibrant-moss, located at 42 Kingsway, London, WC2B 6EX, United Kingdom.

Your GDPR Rights

Under GDPR, you have the following rights:

Right to Access

You have the right to request copies of your personal data.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions.

Right to Data Portability

You have the right to request transfer of your data to another organisation or directly to you.

Right to Object

You have the right to object to our processing of your personal data under certain circumstances.

Data Protection Officer

For questions regarding data protection or to exercise your GDPR rights, please contact us at [email protected]

Data Transfers

We do not transfer personal data outside the United Kingdom or European Economic Area.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.

ICO Website: www.ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements.