Information on this site is advertising in nature

GDPR Compliance

Last Updated: September 11, 2026

Our Commitment to GDPR

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements and what rights you have regarding your personal information.

Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent: When you provide explicit consent for specific processing activities
  • Contract Performance: Processing necessary to provide the services you request
  • Legal Obligation: When required to comply with legal requirements
  • Vital Interests: In emergency situations affecting health or safety
  • Legitimate Interests: For business operations that do not override your rights

Data Controller Information

For the purposes of GDPR, the data controller is:

wind-serval
42 Wellington Terrace
Bristol BS8 4LE
United Kingdom
Email: [email protected]

Your GDPR Rights

Right to Access

You have the right to request a copy of all personal data we hold about you. We will provide this information in a commonly used electronic format within one month of your request.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will update the information promptly upon verification.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances:

  • The data is no longer necessary for its original purpose
  • You withdraw consent and no other legal basis exists
  • You object to processing and no overriding legitimate grounds exist
  • The data was unlawfully processed
  • Deletion is required for legal compliance

Note that we may need to retain certain information to fulfill legal obligations or establish legal claims.

Right to Restriction of Processing

You can request that we limit how we use your personal data in specific situations:

  • While we verify the accuracy of disputed data
  • When processing is unlawful but you prefer restriction to deletion
  • When we no longer need the data but you require it for legal claims
  • While we verify legitimate grounds for processing you have objected to

Right to Data Portability

For data you provided to us based on consent or contract performance, you have the right to receive that data in a structured, commonly used, machine-readable format. You can also request that we transfer this data directly to another controller where technically feasible.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests or rights.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that significantly affects you. Our services may use automated systems for fall detection and activity monitoring, but significant decisions involve human review.

How to Exercise Your Rights

To exercise any of these rights, send a request to [email protected] with:

  • Your full name and contact information
  • Description of the specific right you wish to exercise
  • Any relevant details to help us locate your information
  • Proof of identity if requested for verification

We will respond to requests within one month, though complex requests may require up to three months with notification of the extension.

Data Protection Measures

We implement appropriate technical and organizational measures to ensure data security:

  • Encryption of data in transit and at rest
  • Regular security assessments and penetration testing
  • Access controls limiting who can view personal data
  • Staff training on data protection obligations
  • Secure disposal procedures for data no longer needed
  • Incident response procedures for potential breaches

International Data Transfers

If we transfer personal data outside the United Kingdom or European Economic Area, we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses approved by relevant authorities
  • Adequacy decisions recognizing equivalent protection levels
  • Binding corporate rules for intra-organization transfers

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals directly with information about the nature of the breach and recommended protective measures.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the relevant supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk

Updates to GDPR Compliance

We regularly review our GDPR compliance procedures to ensure they reflect current best practices and regulatory requirements. Any significant changes will be communicated through our website and to active service users.