GDPR Compliance

Last updated: 19 June 2026

Our Commitment to Data Protection

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 in all our data processing activities.

Data Controller Information

For the purposes of data protection legislation, the data controller is:

maroon-sky
42 Deansgate
Manchester, M3 2AY
United Kingdom

Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contract: Processing necessary to perform a contract with you or to take steps at your request before entering into a contract
• Legitimate Interests: Processing necessary for our legitimate interests in operating our business, provided these interests do not override your rights
• Legal Obligation: Processing necessary to comply with legal requirements, such as tax and business record-keeping obligations

Data Subject Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and, if so, obtain a copy of that data and information about how we use it.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

In certain circumstances, you may request deletion of your personal data. This right is not absolute and may be subject to legal retention requirements.

Right to Restrict Processing

You may request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

Where technically feasible, you may request transfer of your personal data to another service provider in a structured, commonly used format.

Right to Object

You may object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Exercising Your Rights

To exercise any of these rights, send a request to [email protected]. We will respond within one month of receiving your request.

We may request proof of identity before fulfilling your request to ensure data security.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
United Kingdom

Telephone: 0303 123 1113
Website: ico.org.uk

Data Protection Principles

We process personal data in accordance with the following principles:

• Lawfulness, fairness, and transparency
• Purpose limitation: data collected for specified, explicit purposes
• Data minimisation: only collecting data that is adequate and relevant
• Accuracy: keeping data accurate and up to date
• Storage limitation: retaining data only as long as necessary
• Integrity and confidentiality: implementing appropriate security measures

International Data Transfers

We do not routinely transfer personal data outside the United Kingdom. If such transfers become necessary, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Changes to This Statement

We may update this GDPR compliance statement periodically. The date at the top indicates when it was last revised.