Last updated: September 29, 2026
Plateau-flow is committed to compliance with the General Data Protection Regulation and the Data Protection Act 2018. This statement outlines how we fulfill our obligations as a data controller.
We process personal data under the following lawful bases:
Under GDPR, individuals have the following rights regarding their personal data:
You may request confirmation of whether we process your personal data and obtain a copy of such data. We will respond to access requests within one month.
You may request correction of inaccurate or incomplete personal data we hold about you.
You may request deletion of your personal data when it is no longer necessary for the purposes collected, you withdraw consent, or you object to processing. This right is subject to legal limitations.
You may request we limit processing of your personal data in specific circumstances, such as when accuracy is contested or processing is unlawful.
You may request your personal data in a structured, commonly used, and machine-readable format for transfer to another controller.
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, contact us using the details provided below. We may request verification of your identity before processing requests to ensure data security.
We retain personal data only as long as necessary for the purposes collected:
We implement appropriate technical and organizational measures including:
We engage third-party processors for website hosting and technical services. All processors are selected based on their ability to provide sufficient guarantees of GDPR compliance. Data processing agreements are established with all processors.
Personal data is primarily processed within the United Kingdom. Any international transfers comply with GDPR requirements through appropriate safeguards such as standard contractual clauses or adequacy decisions.
In the event of a personal data breach likely to result in risk to your rights and freedoms, we will notify you without undue delay. We maintain internal procedures to detect, report, and investigate breaches.
Our services are directed toward business professionals and organizations. We do not knowingly collect personal data from individuals under 16 years of age.
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk
For questions regarding data protection or to exercise your rights:
Plateau-flow
142 Kingsland Road
London E2 8DY
United Kingdom
Email: [email protected]
We review this GDPR compliance statement regularly and will update it as necessary to reflect changes in our processing activities or legal requirements.