GDPR Compliance

Last updated: August 2026

Our Commitment to GDPR

flux-marten is committed to compliance with the General Data Protection Regulation (GDPR) and UK data protection legislation. We take our responsibilities regarding the protection of personal data seriously and have implemented appropriate measures to ensure compliance.

Data Controller

flux-marten acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing your personal data.

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to fulfill contractual obligations
• Legal obligation: When required by law
• Legitimate interests: When necessary for legitimate business purposes that do not override your rights

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right of Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies if requests are manifestly unfounded or excessive.

Right to Rectification

You have the right to request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when data is no longer necessary for the purposes it was collected.

Right to Restrict Processing

You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of data or object to processing.

Right to Data Portability

You have the right to request transfer of your personal data to another organisation or directly to you in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

contact at flux-marten.com

We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two additional months and will inform you accordingly.

Data Protection Principles

We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency in processing
• Purpose limitation - data collected for specified, explicit purposes
• Data minimization - only collecting necessary data
• Accuracy - keeping data accurate and up to date
• Storage limitation - retaining data only as long as necessary
• Integrity and confidentiality - appropriate security measures
• Accountability - demonstrating compliance

International Data Transfers

We process data primarily within the United Kingdom and European Economic Area. If we transfer data internationally, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.