GDPR Compliance

Last updated: May 22, 2026

faint-shadow is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Data Controller

faint-shadow acts as the data controller for personal information collected through our website and services. You can contact us at [email protected] for any data protection matters.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to fulfill a contract with you
• Legitimate Interests: When we have a legitimate business interest that does not override your rights
• Legal Obligation: When required to comply with legal requirements

Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Request transfer of your data to another organization
• Right to Object: Object to certain types of processing
• Rights Related to Automated Decision Making: Protection from decisions based solely on automated processing

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month, as required by GDPR.

Data Protection Officer

For questions about how we handle your personal data or to exercise your rights, you can reach our data protection contact at [email protected].

International Data Transfers

Your personal data is processed and stored within the United Kingdom. If we need to transfer data outside the UK, we will ensure appropriate safeguards are in place in accordance with GDPR requirements.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours, as required by GDPR.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.

ICO Contact:
Website: ico.org.uk
Phone: 0303 123 1113

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Please check this page periodically for updates.

Contact Us

For any questions regarding GDPR compliance or your data protection rights, please contact us at [email protected].