Last updated: June 2026
The General Data Protection Regulation gives you specific rights regarding your personal data. This notice explains those rights and how we comply with GDPR requirements.
For the purposes of GDPR, the data controller is:
subgoamigd
142 Southwark Street
London SE1 0UP
United Kingdom
Email: [email protected]
We process your personal data under the following lawful bases as defined by GDPR:
Processing is necessary for the performance of a contract to which you are party, or to take steps at your request prior to entering into a contract. This applies when we process your information to provide consultation services.
Processing is necessary for compliance with legal obligations, including record-keeping requirements for legal service providers.
Processing is necessary for our legitimate interests in operating and improving our business, provided these interests do not override your fundamental rights and freedoms.
Where required, we obtain your explicit consent for specific processing activities such as marketing communications.
You have the right to obtain confirmation that we are processing your personal data and to receive a copy of that data. We will respond to access requests within one month.
You have the right to have inaccurate personal data corrected and incomplete data completed.
You have the right to request deletion of your personal data in certain circumstances, including:
This right does not apply where we are required by law to retain your information.
You have the right to restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
We process and store your personal data within the United Kingdom. If we need to transfer data outside the UK, we ensure appropriate safeguards are in place as required by GDPR.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our standard retention period for case files is seven years from case closure.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours where feasible, in accordance with GDPR requirements.
To exercise any of your GDPR rights, please contact us:
Email: [email protected]
Subject line: GDPR Request
Please include:
We will respond to your request within one month. In complex cases, we may extend this by two further months and will inform you of the extension and reasons.
If you believe we have not complied with GDPR, you have the right to lodge a complaint with a supervisory authority. In the UK, this is:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: www.ico.org.uk
We may update this GDPR notice to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised date.
If you have questions about our GDPR compliance or data protection practices, please contact us at [email protected]