GDPR Compliance Statement

Last Updated: June 18, 2026

Our Commitment to GDPR

reed-loft is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This page explains how we fulfill our obligations under GDPR.

Data Controller

reed-loft acts as the data controller for personal information collected through our website and services.

Contact details:
[email protected]
42 Clerkenwell Road, London EC1M 5PS, United Kingdom

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Consent: When you submit information through our forms
• Legitimate Interests: To provide and improve our services
• Contract: To fulfill services you've requested
• Legal Obligation: To comply with applicable laws

Your Rights Under GDPR

Right to Access

You have the right to request a copy of the personal information we hold about you.

Right to Rectification

You can request that we correct any inaccurate or incomplete personal information.

Right to Erasure

You can request deletion of your personal information in certain circumstances.

Right to Restrict Processing

You can request that we limit how we use your personal information.

Right to Data Portability

You can request a copy of your data in a structured, commonly used format.

Right to Object

You can object to processing of your personal information based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not complied with GDPR requirements.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

[email protected]

We will respond to your request within one month, as required by GDPR. In complex cases, we may extend this by an additional two months and will inform you if this is necessary.

Data Protection Principles

We ensure that personal data is:

• Processed lawfully, fairly, and transparently
• Collected for specified, explicit, and legitimate purposes
• Adequate, relevant, and limited to what is necessary
• Accurate and kept up to date
• Kept only as long as necessary
• Processed securely with appropriate technical and organizational measures

Data Security

We implement appropriate security measures to protect your personal information from unauthorized access, accidental loss, destruction, or damage. These measures include:

• Secure data transmission protocols
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

International Data Transfers

Your personal information is primarily processed within the United Kingdom. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place as required by GDPR.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and will inform you without undue delay.

Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from children under 16 without parental consent.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. The "Last Updated" date at the top indicates when changes were last made.

Questions and Complaints

If you have questions about our GDPR compliance or wish to make a complaint:

Contact us: [email protected]

UK Supervisory Authority:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk