GDPR Statement
Salveus Labs is committed to the UK GDPR and the Data Protection Act 2018. This statement sets out how we meet our obligations and how you can exercise your rights. It complements our Privacy Policy.
1. Data controller
Salveus Labs Ltd is the controller for personal data collected through this site and our enquiry process. Contact our data team at privacy@salveus.co.uk.
2. Principles we apply
- Lawfulness, fairness, transparency — we tell you what we collect and why.
- Purpose limitation — data is used only for the purposes stated.
- Data minimisation — we ask only for what we need to assess fit and respond.
- Accuracy — we keep records up to date and correct errors promptly.
- Storage limitation — we retain data only as long as necessary.
- Integrity & confidentiality — we protect data with appropriate technical and organisational measures.
- Accountability — we can demonstrate our compliance.
3. Your rights in full
- Access — obtain a copy of your personal data.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion ("right to be forgotten").
- Restriction — limit how we process your data.
- Portability — receive your data in a portable format.
- Objection — object to processing based on legitimate interests or direct marketing.
- Withdraw consent — at any time, without affecting prior processing.
We respond to verified requests within one calendar month. To make a request, email privacy@salveus.co.uk.
4. Lawful bases
We process enquiry data on the basis of consent and/or steps to enter a contract, and operational data under our legitimate interests, balanced against your rights.
5. International transfers
Where data is transferred outside the UK, we use appropriate safeguards including the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses with additional measures where needed.
6. Data breaches
We maintain procedures to detect, report and investigate personal-data breaches and will notify the ICO and affected individuals where legally required.
7. Complaints
If you are unhappy with how we handle your data, contact us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
This document is a first-draft template and should be reviewed by qualified counsel before publication.