GDPR Compliance

cosmic-marten is committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines your rights and explains how we fulfil our obligations as a data controller.

Our Role as Data Controller

For the purposes of data protection law, cosmic-marten acts as the data controller for personal information collected through our website and services. This means we determine how and why your personal data is processed.

Your Data Protection Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right to Be Informed

You have the right to be told how your personal data is being used. We provide this information through our Privacy Policy and this GDPR notice.

Right of Access

You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it.

Right to Erasure

Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You can request that we limit how we use your data while we address concerns you have raised about accuracy or our use of the data.

Right to Data Portability

Where technically feasible, you can request that we transfer your personal data to another organisation in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing of your personal data where we are relying on legitimate interests as our legal basis, or where we are processing data for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the details below. We may need to verify your identity before processing your request. There is no fee for most requests, though we may charge a reasonable fee for excessive or unfounded requests.

Data Protection Principles

We adhere to the following principles when processing personal data:

• Lawfulness, fairness and transparency: We process data lawfully and provide clear information about our processing activities.
• Purpose limitation: We collect data for specified, explicit purposes and do not process it in ways incompatible with those purposes.
• Data minimisation: We only collect data that is necessary for our stated purposes.
• Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date.
• Storage limitation: We retain data only for as long as necessary.
• Integrity and confidentiality: We implement appropriate security measures to protect personal data.
• Accountability: We maintain records and can demonstrate our compliance with these principles.

Data Breach Procedures

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected individuals without undue delay.

Supervisory Authority

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: ico.org.uk

Contact Our Data Controller

For any data protection queries or to exercise your rights, please contact:

cosmic-marten
45 Deansgate
Manchester, M3 2AY
United Kingdom

Email: [email protected]

Last updated: September 2026