GDPR Compliance

Last updated: August 13, 2026

Our Commitment to Data Protection

ripugsolin is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws. This page outlines how we comply with GDPR requirements.

Data Controller

ripugsolin is the data controller responsible for your personal information. Our contact details are:

ripugsolin
17 George Street
Edinburgh EH2 2PA
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Contract: Processing necessary to fulfill our contractual obligations to you
• Legitimate Interest: Processing necessary for our legitimate business interests, balanced against your rights
• Legal Obligation: Processing required to comply with legal requirements
• Consent: Where you have given explicit consent for specific processing activities

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You can request that we limit how we use your personal data.

Right to Data Portability

You can request your data in a structured, commonly used format for transfer to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have rights relating to automated decision-making and profiling, where applicable.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended in complex cases.

Data Security Measures

We implement appropriate technical and organizational security measures, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection
• Incident response procedures

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

International Data Transfers

When we transfer your data outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy or as required by law. Retention periods vary depending on the nature of the data and legal requirements.

Complaints

If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK.

ICO Contact Details:
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

Updates to This Policy

We may update this GDPR compliance statement periodically. Changes will be posted on this page with a revised date.