GDPR Compliance Information

Last updated: June 3, 2026

Our Commitment to Data Protection

fjord-stoat is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This page provides specific information about how we comply with GDPR requirements and how you can exercise your data protection rights.

Data Controller Information

The data controller responsible for your personal data is:

fjord-stoat
47 Rye Lane
Peckham, London SE15 5EW
United Kingdom
Email: [email protected]

What Personal Data We Collect

We collect and process the following categories of personal data:

  • Identity Data: Name, title
  • Contact Data: Email address, postal address
  • Special Category Data: Dietary requirements (health-related information)
  • Technical Data: IP address, browser type, device information
  • Usage Data: Information about how you use our website and services
  • Marketing and Communications Data: Your preferences for receiving marketing

Legal Bases for Processing

We only process your personal data when we have a legal basis to do so:

  • Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., marketing communications)
  • Contract: Processing is necessary for a contract we have with you (e.g., booking a cooking class)
  • Legal Obligation: Processing is necessary for us to comply with the law
  • Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided your interests and rights do not override those interests

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

1. Right to Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a "data subject access request."

2. Right to Rectification

You have the right to request that we correct any personal data we hold that is inaccurate or incomplete.

3. Right to Erasure ("Right to be Forgotten")

You have the right to request that we delete your personal data in certain circumstances, such as when it is no longer necessary for the purpose it was collected.

4. Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

5. Right to Data Portability

You have the right to request that we transfer your personal data to another organization or directly to you in a commonly used, machine-readable format.

6. Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

7. Rights Related to Automated Decision Making

We do not use automated decision-making or profiling in ways that produce legal effects concerning you or similarly significantly affect you.

8. Right to Withdraw Consent

Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time.

How to Exercise Your Rights

To exercise any of your rights, please contact us:

  • Email: [email protected]
  • Post: fjord-stoat, 47 Rye Lane, Peckham, London SE15 5EW, United Kingdom

We will respond to your request within one month. In some cases, where the request is complex or we receive multiple requests, we may extend this period by two further months, and we will inform you if this is necessary.

You will not have to pay a fee to access your personal data or to exercise any of your other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

Processing Special Category Data

When you provide dietary requirements (which may include health information), we process this as special category data. We do this:

  • With your explicit consent
  • To ensure we can safely provide our culinary services to you
  • Strictly on a need-to-know basis within our organization

This information is only shared with instructors and chefs who need it to accommodate your requirements.

Data Retention

We only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Typical retention periods:

  • Booking and payment records: 7 years (tax and accounting requirements)
  • Marketing consent records: Until you withdraw consent or unsubscribe
  • Website cookies: As specified in our Cookies Policy

International Transfers

We primarily store and process data within the United Kingdom. If we need to transfer your data outside the UK, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the UK authorities
  • Transfers to countries with adequacy decisions

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first.

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. Please check back periodically for updates.