GDPR Compliance Statement

Last Updated: 2 June 2026

Bronze Hollow Environmental Ltd is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This statement outlines how we meet our obligations under these regulations.

Data Controller

Bronze Hollow Environmental Ltd is the data controller responsible for your personal data. Our registered office is:

Bronze Hollow Environmental Ltd
42 Woodland Park Avenue
Bristol, BS8 2QR
United Kingdom

Lawful Basis for Processing

We process personal data under the following lawful bases:

Consent: You have given clear consent for us to process your personal data for specific purposes.
Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
Legal obligation: Processing is necessary for us to comply with the law.
Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests.

Your Rights Under GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right to be informed: You have the right to clear, transparent information about how we use your personal data.
Right of access: You have the right to request a copy of the personal data we hold about you.
Right to rectification: You have the right to request correction of inaccurate or incomplete personal data.
Right to erasure: You have the right to request deletion of your personal data in certain circumstances.
Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to data portability: You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
Right to object: You have the right to object to processing based on legitimate interests or the performance of a task in the public interest.
Rights related to automated decision making: You have the right not to be subject to a decision based solely on automated processing.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us using the details below. We will respond to your request within one month of receipt.

Email: [email protected]
Post: Data Protection Officer, Bronze Hollow Environmental Ltd, 42 Woodland Park Avenue, Bristol, BS8 2QR, United Kingdom

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods vary depending on the type of data and the purpose for processing.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

Encryption of personal data in transit and at rest
Regular security assessments and updates
Access controls and authentication measures
Staff training on data protection principles
Regular backups and disaster recovery procedures

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

International Data Transfers

We do not routinely transfer personal data outside the United Kingdom. If such transfers become necessary, we will ensure appropriate safeguards are in place, such as standard contractual clauses approved by the ICO.

Third-Party Processors

We may engage third-party service providers to process personal data on our behalf. All such processors are selected carefully and are required to:

Process data only on our documented instructions
Implement appropriate security measures
Assist us in meeting our GDPR obligations
Delete or return data when services conclude

Complaints

If you believe we have not complied with your data protection rights, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire
SK9 5AF
United Kingdom
Tel: 0303 123 1113
Website: ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page.

Contact Us

For any questions about our GDPR compliance or to exercise your rights, please contact us at [email protected].