GDPR Compliance

Last updated: June 2026

Our Commitment to GDPR

rustic-birch is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take your privacy seriously and are dedicated to protecting the personal data you entrust to us.

Data Controller Information

rustic-birch acts as the data controller for personal information collected through our website and in the course of providing our services. As data controller, we determine the purposes and means of processing your personal data and are responsible for its protection.

Contact details:
rustic-birch
47 Maple Street
London, W1T 4HQ
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so. The lawful bases we rely on include:

• Contract: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract. This applies when you engage our moving services.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. This includes improving our services and responding to enquiries.
• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Legal Obligation: Where processing is necessary to comply with the law.

Your Rights Under GDPR

The UK GDPR provides you with several rights regarding your personal data:

Right to Be Informed

You have the right to be informed about the collection and use of your personal data. This notice, along with our Privacy Policy, fulfils this requirement.

Right of Access

You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond within one month of receiving your request.

Right to Rectification

You have the right to have inaccurate personal data corrected or completed if it is incomplete.

Right to Erasure

You can request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.

Right to Restrict Processing

You can request that we limit the way we use your personal data in certain circumstances.

Right to Data Portability

You have the right to obtain your personal data in a structured, commonly used, and machine-readable format and to transfer it to another organisation.

Right to Object

You can object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have rights related to automated decision-making and profiling. We do not currently use automated decision-making processes that produce legal or similarly significant effects.

Exercising Your Rights

To exercise any of your rights, please contact us using the details provided above. We may need to verify your identity before processing your request. We will respond to your request within one month, though this period may be extended by two further months for complex requests.

You will not be charged a fee for exercising your rights, except in cases where requests are manifestly unfounded or excessive.

Data Protection Principles

We adhere to the following data protection principles:

• Personal data is processed lawfully, fairly, and transparently
• Personal data is collected for specified, explicit, and legitimate purposes
• Personal data is adequate, relevant, and limited to what is necessary
• Personal data is accurate and kept up to date
• Personal data is not kept longer than necessary
• Personal data is processed securely with appropriate measures against unauthorised processing, loss, destruction, or damage

Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Supervisory Authority

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
Website: ico.org.uk

Updates to This Notice

We may update this GDPR notice from time to time. Any changes will be posted on this page with an updated revision date.