GDPR & Data Protection.
Our commitment
Amperzand Ltd is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 in everything we do. This page explains our registration status, the lawful basis on which we process any information, and how you can exercise your rights.
ICO registration
Amperzand Ltd is registered as a data controller with the UK Information Commissioner's Office (ICO).
- Registration reference: ZC178967
- Registered company: Amperzand Ltd, No. 17291486
- Registered office: Unit A, 82 James Carter Road, Mildenhall, Suffolk, IP28 7DE
You can verify our registration directly on the ICO's public register.
Lawful basis for processing
Where we do process personal information — for example, when you email us or book a call — we rely on the following lawful bases under UK GDPR:
- Legitimate interests: responding to enquiries and progressing business relationships you've initiated with us
- Consent: where you've actively provided information for a specific purpose, such as booking a meeting
- Contract: where processing is necessary to deliver services you've engaged us for
Your rights under UK GDPR
You have the following rights in relation to any personal data we hold about you:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate or incomplete data
- Right to erasure — ask us to delete your data, where there is no lawful reason to keep it
- Right to restrict processing — ask us to limit how we use your data
- Right to data portability — request your data in a portable format
- Right to object — object to processing based on legitimate interests
To exercise any of these rights, contact us at [email protected]. We will respond within one month, as required by law.
Data security
We take reasonable technical and organisational measures to protect any information we hold, including restricting access to personal data to those who need it, and using secure, reputable third-party providers (such as Calendly for scheduling) who maintain their own data protection standards.
International transfers
Where third-party services we use (such as our scheduling or hosting providers) process data outside the UK, we ensure appropriate safeguards are in place, such as reliance on adequacy decisions or standard contractual clauses, in line with UK GDPR requirements.
Making a complaint
If you have concerns about how we handle your personal data, please contact us first at [email protected] so we can try to resolve the issue directly. You also have the right to lodge a complaint with the ICO:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
See also our Privacy Policy and Cookie Policy. Questions? Contact us at [email protected].