GDPR Compliance

Last updated: September 2026

Our Commitment to Data Protection

rain-panther is committed to ensuring the security and protection of the personal information that we process, and to providing a compliant and consistent approach to data protection. We have implemented this GDPR Compliance policy to inform you of your rights and our obligations in handling your personal data.

Data Controller

rain-panther acts as a Data Controller for the personal information we collect from you. This means we determine the purposes and means of processing personal data.

Our contact details are:

rain-panther
12 Charlotte Square
Edinburgh EH2 4DR
United Kingdom

Email: [email protected]

Lawful Bases for Processing

We process personal data under the following lawful bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests.
• Legal Obligation: Where processing is necessary to comply with our legal obligations.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions. This is also known as the right to be forgotten.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions, particularly where we rely on legitimate interests as our lawful basis.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

Exercising Your Rights

If you wish to exercise any of these rights, please contact us using the details above. We will respond to your request within one month of receipt. In complex cases, we may extend this period by a further two months, but we will inform you of any extension within one month of your request.

We may ask you to verify your identity before processing your request. We will not charge a fee for most requests, but we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

Data Security

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Regular testing and evaluation of security measures
• Staff training on data protection obligations
• Access controls limiting who can view personal data

Data Breach Procedures

In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

International Transfers

We do not routinely transfer personal data outside the United Kingdom. If such transfers become necessary, we will ensure appropriate safeguards are in place in accordance with data protection legislation.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: ico.org.uk

Changes to This Policy

We reserve the right to update this GDPR Compliance policy at any time. Any changes will be posted on this page with an updated revision date.