GDPR Compliance

Last updated: August 2026

General Data Protection Regulation

ittiognose is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This document outlines how we comply with GDPR requirements and your rights as a data subject.

Lawful Basis for Processing

We process personal data under the following lawful bases:

Consent: When you provide explicit consent for us to process your data
Contract: When processing is necessary for fulfilling a contract with you
Legal obligation: When we must process data to comply with legal requirements
Legitimate interests: When processing is necessary for our legitimate business interests

Data Subject Rights

Under GDPR, you have the following rights:

Right to be informed about data collection and use
Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure (right to be forgotten)
Right to restrict processing
Right to data portability
Right to object to processing
Rights related to automated decision making and profiling

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two additional months, and we will inform you accordingly.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Project-related data is typically retained for seven years in accordance with business record-keeping requirements.

International Data Transfers

We primarily store and process data within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Protection Officer

For questions regarding GDPR compliance or to exercise your data protection rights, you may contact our data protection representative at [email protected].

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Updates to This Notice

We may update this GDPR compliance notice to reflect changes in our data processing practices or legal requirements. Significant changes will be communicated through our website.