GDPR Compliance Statement

Last Updated: 25 May 2026

rare-vibe is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

rare-vibe acts as the data controller for personal information collected through our website and services.

Contact details:
Email: [email protected]
Address: 42 Finsbury Square, London, EC2A 1PX, United Kingdom

2. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal obligation: Processing is necessary for us to comply with the law
• Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests

3. Data We Collect

We collect and process the following categories of personal data:

• Identity data (name)
• Contact data (email address)
• Programme preference data
• Communication data (messages you send us)
• Technical data (IP address, browser type, cookies)

4. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to access: You can request copies of your personal data
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data
• Right to restrict processing: You can request that we limit how we use your data
• Right to data portability: You can request transfer of your data to another organisation or directly to you
• Right to object: You can object to our processing of your data
• Rights related to automated decision-making: You have protections against solely automated decision-making

5. How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been breached.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.

Registration enquiry data is typically retained for 2 years unless you request earlier deletion.

7. Data Security

We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

8. International Data Transfers

Your personal data is processed and stored within the United Kingdom. If we need to transfer data outside the UK, we ensure appropriate safeguards are in place.

9. Updates to This Statement

We may update this GDPR compliance statement from time to time. Changes will be posted on this page with an updated date.

10. Contact Information

For any questions about GDPR compliance or to exercise your rights, contact us at:

Email: [email protected]
Address: 42 Finsbury Square, London, EC2A 1PX, United Kingdom