GDPR commitments

glisterpath follows the General Data Protection Regulation and UK data protection law. This page summarises your rights and our responsibilities.

Your rights

  • Right to access your personal data.
  • Right to correct inaccurate or incomplete data.
  • Right to erasure where there is no legal basis to retain data.
  • Right to restrict processing in specific circumstances.
  • Right to data portability for information you provided.
  • Right to object to processing based on legitimate interests.

How to make a request

Send a request to [email protected]. We may ask for verification to protect your information. We aim to respond within one month.

Lawful bases for processing

Consent

Used for optional updates and cookie preferences.

Contract

Needed to deliver guidance services you request.

Legitimate interests

Used to improve service quality and maintain secure systems.

Data processing overview

We process only the information required to provide guidance and maintain secure records. We avoid collecting unrelated personal data and keep records accurate.

  • Case notes are stored securely and accessed only by assigned staff.
  • Evidence summaries are retained for the minimum period necessary.
  • We keep an audit trail for access to sensitive records.

International transfers

We store and process data in the United Kingdom. If we use suppliers, they must meet UK data protection standards and sign data processing agreements.

Complaints and oversight

If you believe your data has been handled incorrectly, contact us first so we can resolve the issue. You may also contact the Information Commissioner’s Office for guidance on data protection matters.