GDPR Compliance

Last updated: August 19, 2026

Our Commitment to GDPR

misty-petal is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and your rights under this regulation.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you submit a booking form or subscribe to communications
• Contract: When processing is necessary to fulfill our service agreement with you
• Legitimate Interest: When necessary for our business operations, provided your rights are not overridden
• Legal Obligation: When required to comply with UK law

Data Controller

misty-petal acts as the data controller for the personal information collected through our website and services. Our contact details are:

misty-petal
127 Aigburth Road
Liverpool L17 6BH
United Kingdom
Email: [email protected]

Your GDPR Rights

Under GDPR, you have the following rights:

Right to Access

You can request a copy of the personal data we hold about you. We will provide this information within one month of your request.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes it was collected, or if you withdraw consent.

Right to Restriction

You can request that we restrict processing of your personal data in certain circumstances.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

Data Protection Officer

For questions regarding data protection or to exercise your rights, you may contact our data protection contact at [email protected].

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

ICO Contact Information:
Website: www.ico.org.uk
Helpline: 0303 123 1113

Data Transfers

We process and store your data within the United Kingdom. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children without parental consent.