Your data protection rights under the UK General Data Protection Regulation
lucid-bridge Ltd is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides specific information about your rights as a data subject and how we fulfil our obligations as a data controller.
lucid-bridge Ltd acts as the data controller for personal data collected through this website and during the provision of our consulting services.
Registered Address:
47 Greenfield Business Park
Manchester, M15 4QT
United Kingdom
Contact for data protection queries: [email protected]
You have the right to obtain confirmation that your data is being processed and to access your personal data. Upon request, we will provide a copy of your personal data free of charge. Additional copies may be subject to a reasonable fee based on administrative costs.
You have the right to have inaccurate personal data corrected without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
You have the right to request the deletion of your personal data where:
This right does not apply where processing is necessary for compliance with a legal obligation or for the establishment, exercise, or defence of legal claims.
You have the right to request restriction of processing where:
Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. You also have the right to transmit that data to another controller without hindrance.
You have the right to object to processing of your personal data based on our legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object at any time, and we will cease processing for such purposes immediately.
We do not currently use automated decision-making processes that produce legal effects or similarly significantly affect you. Should this change, we will update this policy and ensure appropriate safeguards are in place.
To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within one month. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests.
We may request additional information to verify your identity before processing your request.
We conduct Data Protection Impact Assessments (DPIAs) where processing is likely to result in a high risk to individuals' rights and freedoms. This includes assessments of new technologies, large-scale processing of sensitive data, and systematic monitoring.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected individuals without undue delay.
Where we transfer personal data outside the United Kingdom, we ensure that appropriate safeguards are in place. This may include:
If you are dissatisfied with how we have handled your personal data or any privacy query, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
This GDPR information page may be updated periodically to reflect changes in our practices or regulatory requirements. The date of the most recent revision will be indicated at the bottom of this page.
Last updated: 1 January 2026