GDPR Compliance

Last Updated: September 23, 2026

Our Commitment to Data Protection

reef-cougar is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

reef-cougar acts as the data controller for personal information collected through this website and in the course of providing our services.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you voluntarily provide information through forms or communications
• Contractual necessity: To perform services you have requested
• Legitimate interests: To improve our services and communicate with clients
• Legal obligation: When required to comply with applicable laws

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of such data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data under certain circumstances.

Right to Restriction

You can request that we restrict processing of your personal data in specific situations.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used format.

Right to Object

You can object to processing of your personal data based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

Data Security Measures

We implement appropriate technical and organizational measures including:

• Secure data storage systems
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Encryption of sensitive data

Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected or as required by law. Once data is no longer needed, it is securely deleted or anonymized.

International Data Transfers

Your personal data is primarily processed within the United Kingdom. Any international transfers are conducted in accordance with UK GDPR requirements.

Exercising Your Rights

To exercise any of your data protection rights, contact us at [email protected]. We will respond to your request within one month.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

ICO contact information:
Website: ico.org.uk
Telephone: 0303 123 1113

Updates to This Notice

We may update this GDPR compliance notice periodically. Changes will be posted on this page with an updated date.