GDPR Compliance

Last updated: September 2026

Our Commitment to Data Protection

stormyheron is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognise the importance of protecting personal data and ensuring that individuals can exercise their rights effectively.

Data Controller

stormyheron acts as the data controller for personal information collected through this website and in the course of providing our environmental consulting services. As data controller, we are responsible for determining how and why your personal data is processed.

Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

• Consent: Where you have provided clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary to perform a contract with you or to take pre-contractual steps at your request
• Legal obligation: Where processing is necessary to comply with legal requirements
• Legitimate interests: Where processing is necessary for our legitimate business interests, balanced against your rights and freedoms

Your Data Subject Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal information we hold about you. We will respond to such requests within one month and provide the information free of charge unless the request is manifestly unfounded or excessive.

Right to Rectification

If you believe that any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond within one month.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose it was collected, or where you withdraw consent.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have disputed.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making in our services.

Exercising Your Rights

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before processing your request. There is no fee for most requests, though we may charge a reasonable fee if requests are manifestly unfounded or excessive.

Data Protection Officer

Given the nature and scale of our operations, we have not appointed a formal Data Protection Officer. However, data protection queries should be directed to our operations team who have responsibility for data protection compliance.

International Data Transfers

We primarily store and process personal data within the United Kingdom. Should we need to transfer data outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

Complaints

If you are not satisfied with how we handle your personal data or your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Contact Information

For data protection enquiries or to exercise your rights, please contact:

stormyheron
47 Sharrow Lane
Sheffield S11 8AE
United Kingdom

Email: [email protected]