GDPR Compliance

Last updated: June 7, 2026

Our Commitment to GDPR

fresh-piston is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we meet our obligations and protect your personal data rights.

Data Controller

fresh-piston acts as the data controller for personal information collected through our website and business operations. We determine how and why your personal data is processed.

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal obligation: Processing is necessary for us to comply with the law
• Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests

Your GDPR Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to be Informed

You have the right to clear, transparent information about how we use your personal data. This information is provided in our Privacy Policy.

Right of Access

You can request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.

Right to Rectification

You can ask us to correct inaccurate or incomplete personal data we hold about you.

Right to Erasure

In certain circumstances, you can request that we delete your personal data. This is also known as the 'right to be forgotten'.

Right to Restrict Processing

You can ask us to restrict how we use your personal data in certain circumstances.

Right to Data Portability

You can request that we transfer your personal data to another organization or directly to you in a structured, commonly used, and machine-readable format.

Right to Object

You can object to our processing of your personal data where we are relying on legitimate interests as our legal basis.

Rights Related to Automated Decision Making

We do not use automated decision making or profiling in our business operations.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with details of your request. We will respond within one month.

Data Protection Principles

We ensure that all personal data we process is:

• Processed lawfully, fairly, and transparently
• Collected for specified, explicit, and legitimate purposes
• Adequate, relevant, and limited to what is necessary
• Accurate and kept up to date
• Kept in a form that permits identification for no longer than necessary
• Processed securely with appropriate technical and organizational measures

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay, and in any case within 72 hours of becoming aware of the breach.

International Data Transfers

We do not transfer personal data outside the United Kingdom. Should this change, we will ensure appropriate safeguards are in place and update this page accordingly.

Complaints

If you have concerns about how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

ICO Contact Details:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

Contact Information

For any questions about our GDPR compliance or to exercise your data rights, contact us at: [email protected]