GDPR Compliance

Last Updated: September 8, 2026

Our Commitment

thicketarc is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection legislation.

Data Controller

thicketarc acts as the data controller for personal information collected through our website and consulting services.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit enquiry forms or subscribe to communications
• Contractual Necessity: To provide consulting services you have requested
• Legitimate Interests: For business operations and improving our services
• Legal Obligation: To comply with applicable laws and regulations

Your GDPR Rights

Under GDPR, you have the following rights:

Right to Access

You can request copies of your personal data held by us.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You can request limitation of how we use your personal data.

Right to Data Portability

You can request transfer of your data to another organisation or directly to you.

Right to Object

You can object to processing based on legitimate interests or direct marketing.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling.

Exercising Your Rights

To exercise any of these rights, contact us at: [email protected]

We will respond to requests within one month. In complex cases, we may extend this by two additional months and will inform you of any delay.

Data Security

We implement appropriate technical and organisational measures including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

Data Breach Notification

In the event of a data breach that poses risks to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Transfers

We primarily process data within the United Kingdom. Any international transfers will be protected by appropriate safeguards as required by GDPR.

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

ICO Contact Details:
Website: ico.org.uk
Helpline: 0303 123 1113

Contact Information

For GDPR-related enquiries, contact us at: [email protected]