Our commitment to data protection under UK GDPR
Last updated: October 2026
Jollydome is committed to ensuring that all personal data processing activities comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we meet our obligations under these regulations.
For the purposes of the UK GDPR, Jollydome acts as the data controller for personal data collected through our website and in the course of providing our consulting services.
Our contact details are:
Jollydome
14 Greenfield Business Park
Manchester, M15 4QT
United Kingdom
Email: [email protected]
We process personal data only where we have a lawful basis to do so. The lawful bases we rely upon include:
The UK GDPR provides you with specific rights regarding your personal data. These include:
You have the right to request a copy of the personal data we hold about you. We will respond to such requests within one month of receipt.
You have the right to request that we correct any personal data that is inaccurate or incomplete.
In certain circumstances, you have the right to request that we delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where we have no lawful basis for continued processing.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to its processing.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to your request within one month, although this period may be extended by up to two months for complex requests.
There is no fee for making a request, unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act on the request.
We maintain records of our data processing activities as required by Article 30 of the UK GDPR. These records document the categories of personal data processed, the purposes of processing, data recipients, and retention periods.
We conduct Data Protection Impact Assessments (DPIAs) where processing is likely to result in a high risk to the rights and freedoms of individuals, as required by Article 35 of the UK GDPR.
Where we transfer personal data outside the United Kingdom, we ensure that appropriate safeguards are in place in accordance with Chapter V of the UK GDPR. These safeguards may include adequacy decisions, standard contractual clauses, or binding corporate rules.
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
If you are not satisfied with our response to any data protection matter, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this page from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last revised.