Last Updated: August 14, 2026
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws. This page explains how we comply with GDPR requirements and outlines your rights as a data subject.
We process your personal data based on the following legal grounds:
For the purposes of GDPR, the data controller is:
kempeburke
142 West George Street
Glasgow G2 2HG
United Kingdom
Email: [email protected]
As a data subject, you have the following rights:
You have the right to request confirmation of whether we process your personal data and, if so, to receive a copy of that data along with information about how it is processed.
You may request correction of inaccurate or incomplete personal data we hold about you. We will make reasonable efforts to update the information promptly.
Under certain circumstances, you may request deletion of your personal data. This right applies when the data is no longer necessary for its original purpose, when you withdraw consent, when you object to processing, or when processing is unlawful. Note that legal obligations may require us to retain certain information.
You may request that we limit how we use your personal data in specific circumstances, such as when you contest the accuracy of the data or object to processing.
Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. We do not currently engage in such automated decision-making.
To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request, though this period may be extended by two additional months for complex requests. We may request additional information to verify your identity before processing your request.
For questions regarding data protection or to exercise your rights, you may contact us at the email address provided above.
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the supervisory authority in your jurisdiction. In the United Kingdom, this is the Information Commissioner's Office (ICO).
Your personal data is primarily stored and processed within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, in accordance with GDPR requirements.
We may update this GDPR information periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.