GDPR Compliance

Last updated: September 1, 2026

Our Commitment to Data Protection

reef-puffin is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit enquiries through our contact form
• Legitimate interests: For responding to service requests and maintaining customer relationships
• Legal obligation: Where required to comply with legal or regulatory requirements

Data Controller

reef-puffin acts as the data controller for personal information collected through this website.

Contact: info at reef-puffin.com

What Data We Collect

We collect and process the following categories of personal data:

• Contact information (name, email address)
• Service enquiry details
• Communication preferences
• Technical data (IP address, browser type) for security purposes

Your GDPR Rights

You have the following rights under GDPR:

Right to Access

You can request a copy of the personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete data.

Right to Erasure

You can request deletion of your personal data, subject to legal retention requirements.

Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

Right to Data Portability

You can request your data in a structured, machine-readable format.

Right to Object

You can object to processing based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, typically:

• Active enquiries: Duration of service provision
• Completed projects: Up to 7 years for business records
• Marketing consent: Until withdrawn or 2 years of inactivity

Data Security

We implement appropriate technical and organisational measures including:

• Secure data transmission protocols
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

International Transfers

Personal data is processed and stored within the United Kingdom and European Economic Area. Any transfers outside these regions would be protected by appropriate safeguards.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant authorities in accordance with GDPR requirements.

Exercising Your Rights

To exercise any of your GDPR rights, contact us at info at reef-puffin.com. We will respond within one month of receipt of your request.

Complaints

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

ICO website: ico.org.uk