GDPR and Your Rights
Last updated: September 2026
Storm-panther is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about your rights and how we handle your data.
Data Controller
Storm-panther is the data controller for personal data collected through this website and in connection with our services. This means we determine how and why your personal data is processed.
Contact details:
Storm-panther
47 Chancery Lane
London WC2A 1PL
Email: [email protected]
Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond to your request within one month of receiving it.
Right to Rectification
You have the right to request that we correct any inaccurate personal data we hold about you. If the data is incomplete, you have the right to have it completed.
Right to Erasure
In certain circumstances, you have the right to request that we delete your personal data. This right applies when:
- The data is no longer necessary for its original purpose
- You withdraw consent (where consent was the legal basis for processing)
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. We do not currently make such automated decisions.
Exercising Your Rights
To exercise any of these rights, please contact us using the details above. We may need to verify your identity before processing your request. We will respond to your request within one month, though this may be extended by two further months for complex requests.
There is no fee for making a request in most circumstances. However, we may charge a reasonable fee if your request is manifestly unfounded or excessive, or if you request additional copies of your data.
Complaints
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Data Security
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit and at rest where appropriate
- Access controls limiting who can view personal data
- Regular security assessments and updates
- Staff training on data protection
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
Updates to This Information
We may update this page from time to time. We encourage you to review it periodically for any changes.