Last Updated: 1 September 2026
bamboo-caribou is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of your personal data seriously and have implemented appropriate measures to ensure compliance.
bamboo-caribou acts as the data controller for personal information collected through this website and in the course of our business operations.
Contact Details:
bamboo-caribou
47 Hanover Street
Liverpool L1 4AF
United Kingdom
[email protected]
We process personal data only when we have a lawful basis to do so. The lawful bases we rely on include:
You have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request.
You have the right to request that we correct any personal data we hold about you that is inaccurate or incomplete.
You have the right to request that we delete your personal data in certain circumstances, such as when it is no longer necessary for the purpose for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to our processing of your personal data where we are relying on legitimate interests as the lawful basis for processing.
Where we are processing your personal data based on consent, you have the right to withdraw that consent at any time.
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month of receipt. In some cases, we may need to verify your identity before processing your request.
We have implemented appropriate technical and organisational security measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory, or internal policy requirements. When personal data is no longer needed, we securely delete or anonymise it.
We primarily process data within the United Kingdom. If we transfer personal data outside the UK, we ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: www.ico.org.uk
Helpline: 0303 123 1113
We may update this GDPR compliance statement from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically for the latest information.