Last updated: September 2026
ash-hawk is committed to full compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We process personal data lawfully, fairly, and transparently.
For the purposes of data protection legislation, ash-hawk is the data controller responsible for your personal information.
Contact details:
Email: [email protected]
Address: 83 Colmore Row, Birmingham, B3 2AP, United Kingdom
We process personal data under one or more of the following lawful bases:
You have the following rights regarding your personal data:
You may request confirmation of whether we process your personal data and obtain a copy of that data.
You may request correction of inaccurate or incomplete personal data.
In certain circumstances, you may request deletion of your personal data, including when it is no longer necessary for the purposes for which it was collected.
You may request that we limit processing of your personal data in specific situations.
You may request that we provide your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
We do not engage in automated decision-making or profiling that produces legal effects concerning you.
To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two additional months, but will inform you of any such extension.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required by law.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. When determining retention periods, we consider:
When personal data is transferred outside the United Kingdom or European Economic Area, we ensure appropriate safeguards are in place, such as:
Where we engage third-party service providers to process personal data on our behalf, we ensure they provide sufficient guarantees to implement appropriate technical and organisational measures. All such processors are bound by data processing agreements that comply with GDPR requirements.
You have the right to lodge a complaint with the supervisory authority if you believe our processing of your personal data violates data protection law.
UK supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
We may update this GDPR compliance statement to reflect changes in our practices or legal obligations. Material changes will be communicated through our website.