Last updated: July 8, 2026
calm-moss.com is committed to compliance with the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018. This statement outlines our approach to processing personal data in accordance with these regulations.
We process personal data under the following legal bases:
calm-moss.com acts as the data controller for personal information collected through this website and associated services.
Contact details:
Spinningfields District
Manchester M3 3JE
United Kingdom
Email: [email protected]
Under GDPR, you have the following rights regarding your personal data:
You may request confirmation of whether we process your personal data and obtain a copy of that data along with information about how it is processed.
You may request correction of inaccurate personal data and completion of incomplete data.
You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when there is no overriding legitimate ground for continued processing.
You may request restriction of processing when you contest data accuracy, when processing is unlawful but you prefer restriction over deletion, when we no longer need the data but you require it for legal claims, or when you have objected to processing pending verification of legitimate grounds.
Where processing is based on consent or contract and carried out by automated means, you may request to receive personal data in a structured, commonly used, machine-readable format and have it transmitted to another controller.
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, submit a request to [email protected]. We will respond within one month of receipt, though this may be extended by two additional months for complex requests. You will be informed of any extension within the initial one-month period.
We may request additional information to verify your identity before processing requests, particularly for access or deletion requests.
When you submit an inquiry form, we collect and process name, email address, service selection, and any additional information you provide. This data is used exclusively for responding to your inquiry and providing requested services.
We collect anonymous usage data to improve website functionality and user experience. This includes page views, navigation patterns, and technical information about your device and browser.
Email correspondence and consultation notes are retained for service delivery, quality assurance, and legal compliance purposes.
We implement appropriate technical and organizational measures to ensure security appropriate to the risk, including:
We engage third-party processors for specific functions such as website hosting and email services. These processors are contractually bound to process data only according to our instructions and maintain appropriate security measures. Data Processing Agreements are in place with all processors handling personal data.
Personal data is primarily processed within the United Kingdom. Any transfers to countries outside the UK are conducted in accordance with GDPR requirements, using appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the Information Commissioner's Office within 72 hours of becoming aware of a breach, where required by regulation.
We retain personal data only for as long as necessary for the purposes outlined in our Privacy Policy. Standard retention periods are:
You may request earlier deletion by contacting us directly.
We do not knowingly process personal data of individuals under 18 years of age. If we become aware that we have inadvertently collected such data, we will delete it promptly.
You have the right to lodge a complaint with the Information Commissioner's Office if you believe we have not complied with data protection requirements:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk
This GDPR Compliance Statement may be updated to reflect changes in our practices or legal requirements. Material changes will be communicated through prominent website notification.