Last updated: September 2026
pebble-magpie is committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our compliance approach and your rights under these regulations.
For the purposes of data protection law, pebble-magpie acts as the data controller for personal information collected through our website and professional services.
Contact details:
pebble-magpie
42 Division Street
Sheffield, S1 4GF
United Kingdom
Email: [email protected]
We process personal data only when we have a lawful basis to do so:
When you voluntarily submit consultation forms or contact us, you provide explicit consent for us to process your information to respond to your inquiry. You may withdraw consent at any time by contacting us.
When we enter into consulting engagements, processing personal data becomes necessary to fulfill our contractual obligations including project delivery, communication, and invoicing.
We process certain data based on legitimate business interests, such as maintaining security, preventing fraud, and improving our services. We conduct balancing tests to ensure these interests do not override your fundamental rights.
We retain and process certain data to comply with UK legal requirements including tax law, professional liability obligations, and environmental regulations.
You have the right to request copies of personal data we hold about you. We will provide this information within one month of your request, free of charge for the first copy.
If you believe personal data we hold is inaccurate or incomplete, you have the right to request correction. We will respond within one month.
You may request deletion of your personal data in certain circumstances, including when it is no longer necessary for the original purpose, when you withdraw consent, or when processing was unlawful. This right is not absolute and may be limited by legal retention requirements.
You can request restriction of processing when you contest data accuracy, when processing is unlawful but you prefer restriction over deletion, when we no longer need the data but you require it for legal claims, or when you have objected to processing pending verification of grounds.
Where technically feasible, you have the right to receive personal data you provided to us in a structured, commonly used format, and to transmit that data to another controller.
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any data protection rights, send a written request to [email protected] including:
We will respond to valid requests within one month. Complex requests may require up to three months, and we will inform you of any extension within the first month.
We implement appropriate technical and organizational security measures including:
In the event of a personal data breach likely to result in risk to your rights and freedoms, we will notify you without undue delay. We will also notify the Information Commissioner's Office within 72 hours of becoming aware of qualifying breaches.
When we engage third-party service providers who process personal data on our behalf, we ensure:
We primarily store and process data within the United Kingdom. If international transfers become necessary, we ensure adequate safeguards through standard contractual clauses or other approved mechanisms under UK data protection law.
We retain personal data only as long as necessary for the purposes collected:
If you believe we have not handled your personal data properly, please contact us first so we can address your concerns. You also have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
We review and update our GDPR compliance procedures regularly. Material changes to how we process personal data will be communicated through website updates and direct notification where appropriate.