GDPR Compliance Statement

Last updated: June 25, 2026

Our Commitment to Data Protection

cypress-loft is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

For the purposes of data protection legislation, the data controller is:

cypress-loft
42 Kingsland Road
Shoreditch
London E2 8DA
United Kingdom

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you submit a consultation request or contact form
• Contract: To provide garden design services you have requested
• Legitimate interests: To improve our services, respond to inquiries, and maintain business records

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR).

Right to Rectification

You can request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You can request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. We do not engage in automated decision making.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with the subject line "GDPR Request" or write to us at the address above.

We will respond to your request within one month. This period may be extended by two additional months where necessary, taking into account the complexity and number of requests.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach.

International Data Transfers

We do not transfer personal data outside the United Kingdom. If this changes, we will ensure appropriate safeguards are in place and inform you accordingly.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations:

• Consultation requests: 3 years after last contact
• Client project data: 6 years after project completion (for legal and warranty purposes)
• Marketing consent records: Until consent is withdrawn
• Website analytics: 26 months

Children's Data

We do not knowingly collect or process personal data from individuals under 16 years of age.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Telephone: 0303 123 1113
Website: https://ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website.

Contact Information

For any questions about our GDPR compliance or to exercise your rights, please contact:

Email: [email protected]
Address: 42 Kingsland Road, Shoreditch, London E2 8DA, United Kingdom