GDPR Information
Last Updated: September 2026
This page provides information about how violet-cedar complies with the General Data Protection Regulation (GDPR) and outlines your rights as a data subject under this regulation.
Data Controller
violet-cedar is the data controller responsible for your personal information collected through this website and our services.
Contact details:
violet-cedar
42 Brunswick Street
Liverpool L2 0PL
United Kingdom
Email: [email protected]
Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract
- Legal Obligation: Processing is necessary to comply with legal obligations
- Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests
Types of Data We Process
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Contact Information | Responding to inquiries and providing services | Consent, Contract |
| Technical Data | Website functionality and security | Legitimate Interests |
| Usage Data | Improving services and user experience | Legitimate Interests |
| Business Information | Delivering consultation services | Contract |
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies if your request is clearly unfounded or excessive.
Right to Rectification
You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.
Right to Erasure
You have the right to request deletion of your personal data under certain conditions, including when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request restriction of processing of your personal data under certain circumstances.
Right to Object
You have the right to object to our processing of your personal data under certain circumstances, particularly where we rely on legitimate interests as the legal basis.
Right to Data Portability
You have the right to request transfer of your data to another organization or directly to you under certain conditions.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended by two additional months for complex requests.
We may need to verify your identity before processing your request. This is a security measure to ensure personal data is not disclosed to unauthorized parties.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements.
Retention periods vary depending on the type of data and purpose:
- Contact form inquiries: retained for up to 2 years unless a business relationship develops
- Client project data: retained for duration of engagement plus 7 years for legal and tax purposes
- Website analytics data: typically retained for 26 months
- Marketing communications data: retained until consent is withdrawn
Data Security
We implement appropriate technical and organizational measures to protect personal data, including encryption, access controls, and regular security assessments. However, no electronic transmission or storage system is completely secure.
International Data Transfers
Your personal data is primarily processed within the United Kingdom and European Economic Area. If data is transferred outside these regions, we ensure appropriate safeguards are in place as required by GDPR.
Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the relevant supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk
Changes to This Information
We may update this GDPR information periodically to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last updated.