GDPR Compliance

Last updated: September 2026

Our Commitment to Data Protection

Silent-cypress is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 in all aspects of our operations.

Data Controller Information

Silent-cypress acts as the data controller for personal information collected through this website and in the course of delivering our environmental consulting services.

Contact details:
Silent-cypress Environmental Consulting
42 Millbank Street
Westminster
London SW1P 4QP
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you submit enquiry forms or subscribe to communications
• Contractual necessity: When processing is necessary to fulfil service agreements
• Legitimate interests: For business operations, service improvement, and communications about our environmental programmes
• Legal obligation: To comply with regulatory and legal requirements

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data in certain circumstances, including when data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You may request limitation of processing in certain situations, such as when you contest the accuracy of data.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request that your personal data be provided in a structured, commonly used format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the details provided above. We will respond to requests within one month, though this may be extended by two additional months in complex cases.

Data Security Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Staff training on data protection principles

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements.

International Transfers

Personal data is primarily processed within the United Kingdom. If data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office as required by UK GDPR.

Children's Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children.

Complaints

If you believe we have not complied with data protection law, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised date.