GDPR Compliance

Last updated: 22 April 2026

Our Commitment to GDPR

Anaba Pitch & Glaze Ltd is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller Information

Data Controller: Anaba Pitch & Glaze Ltd
Registration: Registered in England and Wales
Address: Unit 7 Riverside Business Park, Winchester, Hampshire SO23 8RR
Contact: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: For marketing communications and non-essential cookies
• Contract: To provide our installation services
• Legal Obligation: To comply with tax, warranty, and safety regulations
• Legitimate Interests: For business operations and service improvement

Your GDPR Rights

Right to Access

You can request a copy of the personal data we hold about you. We will respond within one month.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data, subject to legal retention requirements.

Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

Right to Data Portability

You can request your data in a structured, commonly used format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling.

How to Exercise Your Rights

To exercise any of your GDPR rights, please:

1. Send an email to [email protected]
2. Include "GDPR Request" in the subject line
3. Specify which right you wish to exercise
4. Provide sufficient information for us to verify your identity

We will respond to your request within one month. If the request is complex, we may extend this by two months and will notify you.

Data Security Measures

We implement appropriate technical and organisational measures including:

• Encrypted data transmission (SSL/TLS)
• Secure data storage with access controls
• Regular security assessments
• Staff training on data protection
• Incident response procedures

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the ICO within 72 hours of becoming aware
• Notify affected individuals without undue delay if there is a high risk
• Document the breach and our response

Third-Party Data Processors

We work with the following categories of data processors:

• Email service providers
• Web hosting services
• Payment processors (for finance arrangements)

All processors are contractually bound to GDPR compliance standards.

International Data Transfers

We do not transfer personal data outside the United Kingdom. All data is stored and processed within the UK.

Complaints

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk

Policy Updates

We review our GDPR compliance regularly and update this page as needed. Changes take effect when posted.