GDPR Compliance

Our Commitment to GDPR

Rain-dolphin is committed to full compliance with the General Data Protection Regulation (GDPR) and UK data protection legislation. This page outlines how we protect your rights and handle your personal data in accordance with these regulations.

Data Controller Information

For the purposes of data protection legislation, the data controller is:

rain-dolphin
45 Bath Street
Glasgow G2 1HW
United Kingdom
Email: [email protected]

Your GDPR Rights

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive. We will respond within one month of receiving your request.

Right to Rectification

You have the right to request correction of any inaccurate personal data we hold about you. You may also request completion of incomplete data.

Right to Erasure

Under certain circumstances, you have the right to request deletion of your personal data. This applies when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Erasure is required for compliance with a legal obligation

Right to Restrict Processing

You have the right to request restriction of processing when:

• You contest the accuracy of the data
• Processing is unlawful but you prefer restriction to erasure
• We no longer need the data but you require it for legal claims
• You have objected to processing pending verification

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that we transfer this data to another controller where technically feasible.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

Exercising Your Rights

To exercise any of your GDPR rights, send a written request to [email protected]. Please include:

• Your full name and contact details
• Details of the specific right you wish to exercise
• Any relevant information to help us locate your data

We will verify your identity before processing requests to protect your data security. We aim to respond within one month, though complex requests may take up to three months with notification of any extension.

Data Processing Activities

We process personal data for the following purposes:

• Responding to consultation requests and inquiries
• Providing energy consulting services
• Maintaining client relationships
• Website analytics and improvement
• Compliance with legal and regulatory obligations

Data Sharing

We do not sell personal data to third parties. We may share data with service providers who assist with website hosting, email communications, or professional services, but only under strict data processing agreements that ensure GDPR compliance.

International Data Transfers

We primarily process data within the United Kingdom and European Economic Area. Any transfers outside these regions are conducted using appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

Supervisory Authority

You have the right to lodge a complaint with the supervisory authority if you believe your data protection rights have been infringed. In the UK, the relevant authority is:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

Data Breach Notification

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach.