GDPR Compliance

Last updated: August 4, 2026

Our Commitment to Data Protection

Prime Fox is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws. This page explains your rights and how we fulfill our obligations under these regulations.

Data Controller Information

Prime Fox acts as the data controller for personal information collected through our website and services.

Contact details:
Prime Fox
15 Deansgate
Manchester M3 2BQ
United Kingdom
[email protected]

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee for multiple copies or manifestly unfounded requests.

Right to Rectification

You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.

Right to Erasure

You have the right to request deletion of your personal data under certain conditions, including:

  • The data is no longer necessary for the purposes for which it was collected
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • The data must be erased to comply with legal obligations

Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain conditions:

  • You contest the accuracy of the data
  • Processing is unlawful but you oppose erasure
  • We no longer need the data but you require it for legal claims
  • You have objected to processing pending verification

Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis, including objection to direct marketing.

Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with:

  • Your full name
  • Your email address or other contact information
  • Specific details of your request
  • Proof of identity (if required for security purposes)

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will notify you of any extension.

Lawful Basis for Processing

We process personal data only when we have a lawful basis:

  • Consent: You have given clear consent for us to process your data for specific purposes
  • Contract: Processing is necessary to perform a contract with you or take steps at your request before entering a contract
  • Legal obligation: Processing is necessary to comply with the law
  • Legitimate interests: Processing is necessary for our legitimate interests or those of a third party, provided your interests and rights do not override those interests

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of personal data in transit and at rest
  • Regular security assessments and updates
  • Access controls limiting who can view personal data
  • Staff training on data protection principles
  • Incident response procedures

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, as required by GDPR.

International Data Transfers

When we transfer your data outside the UK or European Economic Area, we ensure appropriate safeguards are in place through:

  • Standard contractual clauses approved by the European Commission
  • Adequacy decisions recognizing equivalent data protection standards
  • Binding corporate rules

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymize it.

Complaints

If you believe we have not handled your data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.