GDPR Compliance

Last updated: June 19, 2026

Our Commitment to GDPR

spectral-fox is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and explains your rights under this regulation.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to fulfill a service contract with you
• Legal Obligation: When we must process data to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests, balanced against your rights

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes it was collected.

Right to Restrict Processing

You have the right to request that we restrict processing of your personal data under certain conditions.

Right to Data Portability

You have the right to request transfer of your personal data to another organization or directly to you in a structured, commonly used format.

Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

Data Protection Officer

For questions regarding data protection or to exercise your GDPR rights, please contact us at [email protected].

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

We primarily process data within the United Kingdom and European Economic Area. Any transfers outside these regions will be conducted with appropriate safeguards in accordance with GDPR requirements.

How to Exercise Your Rights

To exercise any of your GDPR rights, please submit a request to [email protected]. We will respond to your request within one month, though this period may be extended by two additional months for complex requests.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.