Effective Date: November 3, 2026
True-otter is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection legislation. This page outlines how we comply with GDPR requirements and how you can exercise your rights as a data subject.
True-otter acts as the data controller for personal information collected through our website and business operations. We are responsible for determining how and why your personal data is processed.
Contact Details:
True-otter
123 Production Lane
London, EC1A 1BB
United Kingdom
Email: [email protected]
We process personal data only when we have a lawful basis to do so under GDPR Article 6:
As a data subject, you have the following rights:
You have the right to be provided with clear, transparent information about how we use your personal data and your rights. This information is provided in our Privacy Policy.
You have the right to obtain confirmation that your data is being processed, access to your personal data, and supplementary information about how it is used.
You have the right to have inaccurate personal data corrected or incomplete personal data completed.
Also known as the "right to be forgotten," this allows you to request deletion or removal of your personal data where there is no compelling reason for its continued processing.
You have the right to request the restriction or suppression of your personal data under certain circumstances.
You have the right to obtain and reuse your personal data for your own purposes across different services in a structured, commonly used, and machine-readable format.
You have the right to object to processing based on legitimate interests, direct marketing, and processing for research or statistical purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you.
To exercise any of your GDPR rights, please contact us using the contact details provided above. We will respond to your request within one month, though this may be extended in complex cases. We may need to verify your identity before processing your request.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible.
We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in high risk to individuals' rights and freedoms. These assessments help us identify and minimize data protection risks.
We primarily process personal data within the United Kingdom. If we transfer personal data outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Our retention periods are based on:
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data infringes data protection law.
For the United Kingdom, the relevant authority is:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: www.ico.org.uk
We may update this GDPR compliance statement from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.
If you have any questions about our GDPR compliance or how we handle your personal data, please contact us at the details provided at the top of this page.