GDPR Compliance

Last updated: July 10, 2026

Data Controller

For the purposes of data protection legislation, starlit-elm acts as the data controller for personal information collected through this website and in the course of providing property preparation services.

Legal Basis for Processing

We process personal data on the following legal bases:

• Contractual necessity: to deliver requested services and fulfill our obligations to you
• Legitimate interests: to improve our services, communicate effectively, and maintain business records
• Consent: where you have provided explicit consent for specific processing activities
• Legal obligation: to comply with UK and EU regulatory requirements

Your GDPR Rights

Under the General Data Protection Regulation, you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request correction of inaccurate or incomplete data.
• Right to erasure: You can request deletion of your personal data in certain circumstances.
• Right to restriction: You can request that we limit the processing of your data.
• Right to data portability: You can request your data in a structured, machine-readable format.
• Right to object: You can object to processing based on legitimate interests or for direct marketing purposes.
• Rights related to automated decision-making: You can request human review of automated decisions that significantly affect you.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by an additional two months, and we will inform you of any delay.

Data Transfers

Your personal data is stored and processed within the United Kingdom. We do not transfer data outside the UK or European Economic Area unless necessary for service delivery, and only with appropriate safeguards in place.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues. Contact details are available at ico.org.uk.

Data Protection Officer

For questions regarding data protection or GDPR compliance, contact our data protection representative at [email protected].