Your rights under the General Data Protection Regulation
Last updated: October 2026
grand-dive is committed to protecting your personal data and respecting your privacy. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
grand-dive acts as the data controller for personal information collected through this website. This means we determine the purposes and means of processing your personal data.
Contact details:
Email: [email protected]
Address: 47 Greenbank Road, Liverpool, L18 1HQ, United Kingdom
We process personal data under the following lawful bases:
Under the UK GDPR, you have the following rights:
You have the right to request a copy of the personal information we hold about you. This is commonly known as a "subject access request".
You have the right to request that we correct any personal information you believe is inaccurate or complete information you believe is incomplete.
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purpose we originally collected it.
You have the right to request that we restrict the processing of your personal data under certain conditions.
You have the right to object to our processing of your personal data under certain conditions, particularly where we are processing data based on legitimate interests.
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
You have rights related to automated decision-making, including profiling. We do not currently use automated decision-making processes that produce legal effects or similarly significantly affect you.
To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month of receiving it. If your request is complex, we may extend this period by a further two months, but we will inform you of this within the first month.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).
We do not routinely transfer personal data outside of the United Kingdom. If we ever need to do so, we will ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.
We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.