Our commitment to protecting your personal data under UK GDPR.
Last updated: October 2026
Deft-sparrow is committed to protecting the personal data of our website visitors and clients in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This page outlines our approach to data protection and explains your rights regarding the personal information we hold about you.
For the purposes of UK GDPR, Deft-sparrow is the data controller responsible for your personal data. Our contact details are:
Deft-sparrow
47 Garden Lane
Leicester, LE2 4TH
United Kingdom
Email: [email protected]
We may process the following categories of personal data:
We collect personal data through:
We only process your personal data when we have a lawful basis to do so. The lawful bases we rely on include:
Under UK GDPR, you have the following rights:
You have the right to be informed about the collection and use of your personal data. This GDPR page and our Privacy Policy provide this information.
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.
You have the right to request correction of inaccurate personal data. We will respond to requests within one month.
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected.
You have the right to request that we restrict processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have rights related to automated decision making and profiling. We do not currently use automated decision-making processes that have legal or similarly significant effects.
We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our standard retention periods are:
We do not routinely transfer personal data outside the United Kingdom. Should this be necessary, we will ensure appropriate safeguards are in place.
To exercise any of your rights, please contact us at [email protected]. We may need to verify your identity before processing your request.
We aim to respond to all legitimate requests within one month. If your request is complex, we may require an additional two months, in which case we will notify you.
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.