Last Updated: September 1, 2026
Pine-fable is committed to full compliance with the General Data Protection Regulation (GDPR) and UK data protection legislation. We recognize the importance of protecting personal data and have implemented comprehensive policies and procedures to ensure lawful, fair, and transparent processing of all personal information.
We process personal data under the following legal bases as defined by GDPR:
As a data subject, you have the following rights which we are committed to honoring:
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information in a commonly used electronic format within one month of your request, free of charge for the first request.
You may request correction of inaccurate personal data and completion of incomplete data. We will assess and respond to such requests within one month, implementing corrections where appropriate.
You have the right to request deletion of your personal data when it is no longer necessary for the purposes collected, when you withdraw consent, or when there is no overriding legitimate ground for continued processing. This right is subject to our legal obligations to retain certain records for regulatory purposes.
You may request that we limit processing of your data in specific circumstances, such as when you contest the accuracy of data, when processing is unlawful but you prefer restriction over deletion, or when you need the data for legal claims after we no longer require it.
Where technically feasible, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller without hindrance.
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
We do not engage in automated decision-making or profiling that produces legal effects or similarly significant impacts. Our services rely on human analysis and consultation.
While not legally required to appoint a Data Protection Officer based on our size and activities, we have designated a privacy compliance contact responsible for overseeing GDPR implementation and addressing data protection concerns.
For questions about data protection or to exercise your rights, contact us through the details provided on our contact page.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on data type and regulatory requirements:
We primarily process data within the United Kingdom and European Economic Area. If data transfer outside these regions becomes necessary, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission to ensure adequate protection.
We employ industry-standard technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, or damage. These measures are regularly reviewed and updated to address evolving security threats.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk to you, we will also communicate directly with affected individuals without undue delay.
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. In the United Kingdom, the relevant authority is:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website with a revised date. We encourage periodic review of this statement to stay informed about how we protect your data.