GDPR Compliance
Last Updated: June 25, 2026
Our Commitment to Data Protection
Neo-vale.com is committed to protecting your personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. This page outlines how we comply with these regulations and your rights as a data subject.
Data Controller
For the purposes of UK data protection law, neo-vale.com is the data controller responsible for your personal information collected through this website.
Contact: [email protected]
Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Consent: When you voluntarily provide information through forms or accept cookies
- Legitimate interests: For operating our website, improving services, and responding to enquiries
- Contract performance: When processing is necessary to fulfil service agreements
- Legal obligation: When required to comply with applicable laws
Your Rights Under GDPR
As a data subject, you have the following rights regarding your personal information:
Right of Access
You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request."
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes it was collected or you withdraw consent.
Right to Restrict Processing
You have the right to request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before withdrawal.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected] with the following information:
- Your full name and contact details
- Specific details of your request
- Proof of identity (for security purposes)
We will respond to your request within one month, though this may be extended by two additional months for complex requests.
Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Secure data transmission protocols
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. Specific retention periods include:
- Enquiry form data: 3 years from submission date
- Analytics data: 26 months
- Cookie consent records: 12 months
International Data Transfers
Your personal data is primarily processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with UK data protection law.
Automated Decision-Making
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
Children's Privacy
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.
Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
Updates to This Information
We may update this GDPR compliance information periodically. Changes will be posted on this page with an updated date.
Contact Us
If you have questions about GDPR compliance or how we handle your personal data, please contact us at [email protected].