Last updated: 20 May 2026
Elegant Roam Ltd is committed to full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our data protection responsibilities seriously and have implemented appropriate measures to protect your personal information.
For the purposes of UK GDPR, Elegant Roam Ltd is the data controller. Our contact details:
Elegant Roam Ltd
42 Woodland Way
Stroud, Gloucestershire GL5 2RN
United Kingdom
Email: [email protected]
We process personal data under the following lawful bases:
Under UK GDPR, you have the following rights:
You can request a copy of all personal data we hold about you. We will provide this within one month of your request, free of charge.
You can ask us to correct any inaccurate or incomplete personal data we hold about you.
You can request deletion of your personal data. This right is not absolute and may be limited by legal obligations to retain certain information.
You can ask us to restrict how we use your data in certain circumstances, such as while we verify the accuracy of data.
You can request your data in a structured, commonly used, machine-readable format and have it transferred to another organization.
You can object to processing based on legitimate interests or for direct marketing purposes.
We do not use automated decision making or profiling that produces legal or similarly significant effects.
To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond within one month. If your request is complex or we receive multiple requests, we may extend this period by two months and will inform you of any delay.
We may need to verify your identity before processing your request to ensure data security.
We implement appropriate technical and organizational measures including:
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach. If the breach poses a high risk to you, we will also notify you directly without undue delay.
When we engage third-party processors, we ensure they provide sufficient guarantees to implement appropriate technical and organizational measures. We have data processing agreements in place with all processors.
We primarily process data within the United Kingdom. If we transfer data internationally, we ensure appropriate safeguards are in place, such as:
We retain personal data only as long as necessary for the purposes for which it was collected:
Our services are primarily for adults. When minors participate in our programmes, we require parental consent and collect only necessary information for their safety and program participation.
If you believe we have not handled your data correctly or have concerns about our compliance, you can contact us directly to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. The current version is always available on our website with the last updated date clearly displayed.
If you have questions about our GDPR compliance or data protection practices, please contact us at [email protected]