Your data protection rights under the General Data Protection Regulation
bistirinsa is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we uphold your rights and ensure responsible handling of your personal data.
bistirinsa acts as the data controller for personal information collected through this website and in the course of providing our services. We determine the purposes and means of processing your personal data.
The UK GDPR provides you with specific rights regarding your personal data:
You have the right to know how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR statement.
You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request. We will respond to such requests within one month.
If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to request correction.
Also known as the right to be forgotten, you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
You can request that we limit how we use your personal data while concerns about accuracy or processing are being addressed.
Where technically feasible, you can request your personal data in a structured, commonly used format to transfer to another service provider.
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have rights related to automated decision making and profiling. We do not currently use automated decision making that produces legal effects concerning you.
We implement appropriate technical and organisational measures to ensure the security of your personal data, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Where the breach is likely to result in high risk to your rights, we will also notify you directly.
We primarily store and process your data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
To exercise any of your GDPR rights, please contact us at:
Email: [email protected]
Address: 47 Colmore Row, Birmingham B3 2BS, United Kingdom
We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, but we will inform you of any extension within the first month.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Last updated: August 2026