Your data protection rights under UK GDPR
Last updated: July 2026
diaboarrin is committed to protecting the privacy and security of your personal data. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we process your data and your rights under these regulations.
diaboarrin is the data controller responsible for your personal data. If you have questions about how we handle your information, please contact us at the address provided below.
You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request". We will provide this information free of charge within one month of your request.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to such requests within one month.
Also known as the "right to be forgotten", you may request that we delete your personal data where there is no compelling reason for its continued processing. This right is not absolute and may be subject to legal retention requirements.
You have the right to request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of your data or object to our processing.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used format.
You have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis. We will stop processing unless we demonstrate compelling legitimate grounds.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently engage in such processing.
We process personal data only where we have a lawful basis to do so. The bases we rely upon include:
The personal data we collect includes:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods are determined by legal requirements, contractual needs, and legitimate business purposes.
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorised manner. We limit access to your personal data to those who have a genuine business need.
Your personal data is stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in compliance with data protection law.
To exercise any of your data protection rights, please contact us using the details below. We may need to verify your identity before processing your request. We aim to respond to all legitimate requests within one month.
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
For any data protection enquiries or to exercise your rights:
diaboarrin
47 Corporation Street
Birmingham B2 4TE
United Kingdom
Email: [email protected]