Our commitment to data protection and your rights
vividcliff is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides additional information about how we meet our obligations under these regulations.
vividcliff acts as the data controller for personal information collected through this website and during the provision of our environmental consulting services. This means we determine the purposes and means of processing personal data.
We process personal data only when we have a lawful basis to do so. The specific basis depends on the context:
When you submit an enquiry through our website, we process your data on the basis of your consent (which you provide by submitting the form) and our legitimate interest in responding to potential client enquiries.
For existing clients, we process data as necessary for the performance of our contract with you. This includes project-related communications, report delivery, and invoicing.
We only send marketing communications where you have provided explicit consent. You may withdraw this consent at any time by contacting us.
Under the UK GDPR, you have the following rights regarding your personal data:
You may request a copy of the personal data we hold about you. We will respond to such requests within one month.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.
In certain circumstances, you may request that we delete your personal data. This right is not absolute and may be subject to legal or contractual retention requirements.
You may request that we limit how we use your data in certain circumstances, such as while we verify the accuracy of information you have challenged.
Where technically feasible, you may request that we transfer your data to another organisation in a structured, commonly used format.
You may object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling grounds that override your interests.
We implement appropriate technical and organisational measures to protect personal data, including:
In the unlikely event of a personal data breach that poses a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to affected individuals, we will also notify those individuals directly.
We primarily process and store data within the United Kingdom. Should any transfer outside the UK be necessary, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authorities.
We retain personal data only for as long as necessary for the purposes for which it was collected. Specific retention periods vary based on the type of data and applicable legal requirements:
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
We would appreciate the opportunity to address any concerns directly before you approach the ICO. Please contact us using the details below.
For any data protection enquiries or to exercise your rights, please contact:
vividcliff
47 Castle Boulevard
Nottingham, NG7 1FD
United Kingdom
Email: [email protected]
Last updated: September 2026