GDPR Compliance Statement

Last updated: June 18, 2026

Our Commitment to Data Protection

glossa-vue.com is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable UK data protection legislation. This document outlines how we comply with GDPR principles and respect your data protection rights.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil service agreements and deliver requested services
• Legitimate interests: Processing necessary for business operations, service improvement, and record keeping
• Legal obligation: Processing required to comply with applicable laws and regulations
• Consent: Processing based on explicit consent you have provided, which you may withdraw at any time

Data Protection Principles

We adhere to the following GDPR principles in all data processing activities:

• Lawfulness, fairness, and transparency: We process data legally, fairly, and with clear communication
• Purpose limitation: Data is collected for specific, legitimate purposes and not used beyond those purposes
• Data minimisation: We collect only data that is necessary for the stated purposes
• Accuracy: We take reasonable steps to ensure personal data is accurate and up to date
• Storage limitation: Data is retained only as long as necessary for the purposes collected
• Integrity and confidentiality: We implement appropriate security measures to protect your data
• Accountability: We demonstrate compliance with these principles and maintain records of processing activities

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information in a commonly used electronic format.

Right to Rectification

You may request correction of inaccurate personal data or completion of incomplete data. We will make corrections within one month of your request, or inform you if this is not possible.

Right to Erasure

Under certain circumstances, you have the right to request deletion of your personal data. This applies when data is no longer necessary for the purposes collected, when you withdraw consent, or when there is no legitimate reason for continued processing.

Right to Restriction of Processing

You may request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller where technically feasible.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produces legal or similarly significant effects. We do not currently engage in automated decision making of this nature.

Exercising Your Rights

To exercise any of your GDPR rights, please submit a request to [email protected]. We will respond within one month of receiving your request. In complex cases, this period may be extended by two additional months, and we will inform you of such extension.

We may request additional information to verify your identity before fulfilling rights requests. This is a security measure to ensure personal data is not disclosed to unauthorised parties.

Data Security Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data in transit and at rest
• Regular security assessments and updates
• Access controls limiting data access to authorised personnel
• Staff training on data protection requirements
• Incident response procedures for potential data breaches

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

Your personal data is processed and stored within the United Kingdom. If we transfer data outside the UK or European Economic Area, we will ensure appropriate safeguards are in place in accordance with GDPR requirements.

Data Protection Officer

For questions or concerns regarding data protection practices, or to exercise your GDPR rights, please contact us at [email protected]

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, if you believe our processing of your personal data violates GDPR requirements.

ICO contact information:
Website: www.ico.org.uk
Telephone: 0303 123 1113

Changes to This Statement

We may update this GDPR Compliance Statement to reflect changes in our practices or legal requirements. Updated versions will be posted on this page with a revised date.