GDPR Compliance

Last updated: September 1, 2026

Our Commitment to GDPR

hazy-canyon is committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Union and United Kingdom.

Legal Basis for Processing

We process personal data under the following legal bases:

Consent: When you voluntarily submit information through our forms
Contractual necessity: To provide requested research services
Legitimate interests: To improve our platform and communicate relevant updates
Legal obligation: To comply with applicable laws and regulations

Data Subject Rights

Under GDPR, you have the following rights:

Right of access: Request copies of your personal data
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your personal data under certain conditions
Right to restrict processing: Request limitation on how we use your data
Right to data portability: Receive your data in a structured, commonly used format
Right to object: Object to processing based on legitimate interests or direct marketing
Rights related to automated decision-making: Not be subject to decisions based solely on automated processing

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within 30 days. You may be required to verify your identity before we process your request.

Data Transfers

Personal data is primarily stored and processed within the United Kingdom. Any international data transfers are conducted in compliance with GDPR requirements, including use of standard contractual clauses or other approved transfer mechanisms.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Contact details are available at ico.org.uk.

Contact Our Data Protection Officer

For questions regarding GDPR compliance or data protection practices, contact our Data Protection Officer at [email protected].