GDPR Compliance

Last updated: June 2026

Our Commitment to Data Protection

flux-thread is committed to ensuring that your personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we comply with these regulations and explains your rights as a data subject.

Data Controller Information

flux-thread acts as the data controller for the personal information we collect. This means we determine the purposes and means of processing your personal data.

Contact details:
flux-thread
47 Westfield Lane
Bristol, BS8 4TQ
United Kingdom
Email: [email protected]

Principles of Data Processing

We adhere to the following principles when processing personal data:

• Lawfulness, fairness, and transparency: We process data lawfully and are transparent about how we use it
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes
• Data minimisation: We only collect data that is necessary for our stated purposes
• Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date
• Storage limitation: We retain data only for as long as necessary
• Integrity and confidentiality: We implement appropriate security measures to protect your data

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Be Informed

You have the right to know how your personal data is being used. Our Privacy Policy provides detailed information about our data processing activities.

Right of Access

You can request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond within one month of receiving your request.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it.

Right to Erasure

Also known as the "right to be forgotten", you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You can request that we limit how we use your personal data in certain situations, for example while we verify the accuracy of data you have disputed.

Right to Data Portability

Where technically feasible, you can request that we transfer your personal data to another organisation or provide it to you in a structured, commonly used, machine-readable format.

Right to Object

You can object to processing based on legitimate interests or processing for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making processes.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to all legitimate requests within one month, though this period may be extended by a further two months for complex requests.

Making a Complaint

If you are dissatisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
Website: ico.org.uk

We encourage you to contact us first so we can attempt to resolve your concerns directly.

Data Protection Impact Assessments

We conduct Data Protection Impact Assessments when introducing new technologies or processing activities that may present high risks to the rights and freedoms of individuals.

Updates to This Information

We may update this page periodically to reflect changes in our practices or legal requirements. Please check back regularly for the latest information on our GDPR compliance.