Last updated: June 4, 2026
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws. This statement outlines how we comply with GDPR requirements and explains your rights under this legislation.
We process your personal data based on one or more of the following legal grounds:
For the purposes of GDPR, the data controller is:
iris-soar
42 Division Street
Sheffield, S1 4GF
United Kingdom
Email: [email protected]
Under GDPR, you have the following rights regarding your personal data:
You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
You have the right to request correction of any information you believe is inaccurate. You also have the right to request completion of information you believe is incomplete.
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data.
You have the right to request transfer of the data we have collected to another organization, or directly to you, in a structured, commonly used, and machine-readable format.
You have the right to object to our processing of your personal data under certain circumstances, particularly where we are relying on legitimate interests as the legal basis for processing.
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you.
To exercise any of these rights, please contact us using the information provided above. We will respond to your request within one month, although this period may be extended by two additional months if your request is particularly complex.
You will not have to pay a fee to access your personal data or to exercise any of your other rights. However, we may charge a reasonable fee or refuse to comply with your request if it is clearly unfounded, repetitive, or excessive.
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.
If we transfer your personal data outside the European Economic Area or United Kingdom, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
For questions specifically related to data protection and GDPR compliance, you may contact our data protection representative at [email protected].
We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.