GDPR Compliance

Last updated: August 4, 2026

Our Commitment to Data Protection

wind-loop is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you voluntarily provide information through our inquiry forms
• Contract: When processing is necessary to fulfill services you have requested
• Legitimate Interests: For business operations and service improvement, balanced against your rights
• Legal Obligation: When required to comply with applicable laws

Data Controller

wind-loop acts as the data controller for personal information collected through our website and services.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You may request a copy of the personal data we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent.

Right to Restriction of Processing

You may request that we limit how we use your personal data in certain circumstances.

Right to Data Portability

You may request your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, or resolve disputes. Inquiry data is typically retained for three years unless you request earlier deletion.

International Data Transfers

We do not transfer personal data outside the United Kingdom or European Economic Area. All data is processed and stored within the UK.

Data Security Measures

We implement appropriate technical and organizational security measures, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Staff training on data protection principles

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data appropriately.

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk