Your data protection rights under the General Data Protection Regulation
turquoise-summit is committed to protecting your personal data and respecting your privacy in compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines our commitment to data protection and explains your rights under these regulations.
turquoise-summit is the data controller responsible for your personal data. This means we determine the purposes and means of processing personal data collected through our website and services.
Contact details:
turquoise-summit
47 Heritage Lane
Bristol, BS1 4TQ
United Kingdom
Email: [email protected]
Under the GDPR and UK data protection law, you have the following rights:
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request. We will provide this information free of charge within one month of your request.
You have the right to request that we correct any personal data that is inaccurate or incomplete. We will respond to your request within one month.
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose for which it was collected, or when you withdraw consent.
You have the right to request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.
You have the right to receive your personal data in a structured, commonly used and machine-readable format, and to transmit that data to another controller where technically feasible.
You have the right to object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making processes.
We process personal data only when we have a lawful basis to do so. The lawful bases we rely upon include:
We may collect and process the following personal data:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Different types of data are retained for different periods depending on legal, operational and business requirements.
We do not routinely transfer personal data outside the United Kingdom or European Economic Area. Should any transfer be necessary, we will ensure appropriate safeguards are in place to protect your data.
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing personal data. These measures include secure servers, access controls and regular security assessments.
To exercise any of your rights under the GDPR, please contact us using the details provided above. We may need to verify your identity before processing your request. We will respond to all legitimate requests within one month.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.
Last updated: September 2026
The information provided on this website is for general informational purposes only. Individual experiences may vary. This content is not intended as professional cultural or historical advice. We recommend consulting with qualified heritage organisations for specific guidance regarding cultural practices and their appropriate contexts.