GDPR Compliance

Last Updated: September 2026

Our Commitment to Data Protection

Sage-glade is committed to compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We take our responsibilities as a data controller seriously and have implemented comprehensive measures to protect your personal data.

Understanding GDPR

The General Data Protection Regulation is a comprehensive data protection law that provides individuals with greater control over their personal data. It applies to any organisation processing personal data of individuals within the European Economic Area and United Kingdom.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Be Informed

You have the right to know how we collect and use your personal data. We provide this information through our Privacy Policy and this GDPR page.

Right of Access

You can request a copy of all personal data we hold about you. We will respond to such requests within one month and provide the information free of charge in most circumstances.

Right to Rectification

If you believe any personal data we hold is inaccurate or incomplete, you have the right to request correction. We will address such requests promptly.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data when:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and no other legal basis for processing exists
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Erasure is required to comply with a legal obligation

Right to Restrict Processing

You may request limitation of processing when:

• You contest the accuracy of personal data
• Processing is unlawful but you prefer restriction over erasure
• We no longer need the data but you require it for legal claims
• You have objected to processing pending verification of legitimate grounds

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you can request your data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision Making

You have rights concerning decisions made solely by automated processing that significantly affect you. We do not currently engage in automated decision-making of this nature.

How We Protect Your Data

We implement appropriate technical and organisational measures including:

• Access controls limiting data access to authorised personnel
• Encryption of personal data during transmission
• Regular security assessments and penetration testing
• Staff training on data protection requirements
• Data minimisation principles in all processing activities
• Regular review of data retention practices

Data Processing Activities

We maintain records of all processing activities as required by Article 30 of the GDPR. These records include:

• Categories of personal data processed
• Purposes of processing
• Categories of data subjects and recipients
• Information about international transfers
• Retention periods
• Security measures in place

Data Protection Impact Assessments

For processing operations that pose high risks to individuals' rights and freedoms, we conduct Data Protection Impact Assessments to identify and minimise data protection risks.

Breach Notification

In the event of a personal data breach that poses risks to your rights and freedoms, we will:

• Notify the Information Commissioner's Office within 72 hours
• Communicate directly with affected individuals when there is high risk
• Document the breach and our response measures

International Data Transfers

When transferring personal data outside the UK or EEA, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant authorities
• Transfers to countries with adequacy decisions
• Binding corporate rules where applicable

Exercising Your Rights

To exercise any of your data protection rights, please contact us at:

Sage-glade
47 Kensington Gardens Square
London W2 4BA
United Kingdom

Email: [email protected]

We will respond to your request within one month. In complex cases, this period may be extended by two additional months, and we will inform you of any such extension.

Supervisory Authority

If you are unsatisfied with our handling of your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom

Website: ico.org.uk

Updates to This Information

We review our GDPR compliance regularly and update this page as necessary. Please check back periodically for any changes.