juniper-beam

GDPR Information

Last updated: September 1, 2026

Your Rights Under GDPR

The General Data Protection Regulation (GDPR) grants individuals in the European Economic Area and United Kingdom specific rights regarding their personal data. juniper-beam is committed to respecting and facilitating these rights.

Right to Be Informed

You have the right to clear, transparent information about how we collect and use your personal data. This information is provided in our Privacy Policy.

Right of Access

You can request confirmation of whether we process your personal data and obtain a copy of that data. To make an access request:

  • Send an email to [email protected] with "Data Access Request" in the subject line
  • Include sufficient information to verify your identity
  • Specify what information you wish to access

We will respond within one month of receiving your request.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to have it corrected. Contact us with the specific information requiring correction, and we will update our records promptly.

Right to Erasure

Also known as the "right to be forgotten," this allows you to request deletion of your personal data under certain circumstances:

  • The data is no longer necessary for the purposes it was collected
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • The data must be erased to comply with a legal obligation

This right is not absolute. We may need to retain certain information to fulfill legal obligations or establish legal claims.

Right to Restriction of Processing

You can request that we limit how we use your personal data in specific situations:

  • You contest the accuracy of the data (restriction applies while we verify)
  • Processing is unlawful but you prefer restriction over erasure
  • We no longer need the data but you require it for legal claims
  • You have objected to processing (restriction applies while we verify legitimate grounds)

Right to Data Portability

You have the right to receive personal data you provided to us in a structured, commonly used, machine-readable format and to transmit that data to another controller. This right applies when:

  • Processing is based on your consent or contract performance
  • Processing is carried out by automated means

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes. Upon receiving an objection, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

You have an absolute right to object to processing for direct marketing purposes.

Rights Related to Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

How to Exercise Your Rights

To exercise any of these rights:

  1. Send an email to [email protected]
  2. Clearly state which right you wish to exercise
  3. Provide information to verify your identity
  4. Include any specific details relevant to your request

We will respond to valid requests within one month. This period may be extended by two additional months for complex requests, and we will inform you of any such extension.

Verification Process

To protect your privacy, we must verify your identity before processing requests. We may request additional information to confirm you are the individual to whom the personal data relates.

No Fee Requirement

You can exercise your rights free of charge. However, we may charge a reasonable fee or refuse the request if it is clearly unfounded, repetitive, or excessive.

Right to Lodge a Complaint

If you believe we have not handled your personal data appropriately or have concerns about how we process your data, you have the right to lodge a complaint with a supervisory authority.

In the United Kingdom, the relevant authority is:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113

For EU residents, contact your national data protection authority.

Data Controller Information

The data controller responsible for your personal information is:

juniper-beam
42 Heritage Lane
Bristol, BS1 4DJ
United Kingdom
Email: [email protected]

Data Processing Records

We maintain records of processing activities as required under GDPR Article 30. These records include:

  • Purposes of processing
  • Categories of data subjects and personal data
  • Categories of recipients to whom data has been disclosed
  • Retention periods
  • Security measures implemented

International Transfers

When we transfer personal data outside the EEA or UK, we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses approved by the European Commission
  • Adequacy decisions confirming adequate protection in the recipient country
  • Other mechanisms recognized under GDPR

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.

Updates to This Information

We may update this GDPR information to reflect changes in our practices or legal requirements. Check this page periodically for updates.

Contact Us

For questions about GDPR compliance or to exercise your rights, contact us at [email protected].