GDPR Compliance
Last Updated: 27 May 2026
1. Our Commitment to GDPR
ANN Lsupra is committed to full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We respect your privacy rights and handle your personal data with care and transparency.
2. Data Controller Information
ANN Lsupra is the data controller for the personal information we process. Our contact details are:
Email: [email protected]
Address: 128 Fenchurch Street, London EC3M 5DJ, United Kingdom
3. Your Rights Under UK GDPR
3.1 Right of Access
You have the right to obtain confirmation that we are processing your personal data and to access that data. You can request a copy of your personal data free of charge.
3.2 Right to Rectification
If your personal data is inaccurate or incomplete, you have the right to have it corrected or completed.
3.3 Right to Erasure (Right to be Forgotten)
Under certain circumstances, you have the right to request deletion of your personal data. This includes situations where:
- The data is no longer necessary for the purpose it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
3.4 Right to Restriction of Processing
You can request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
3.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
3.6 Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
3.7 Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that produces legal effects or similarly significantly affects you.
4. How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended by two additional months in complex cases.
5. Lawful Basis for Processing
We process your personal data only when we have a lawful basis to do so:
- Consent: You have given clear consent for us to process your data for specific purposes
- Contract: Processing is necessary for a contract we have with you
- Legal obligation: Processing is necessary to comply with the law
- Legitimate interests: Processing is necessary for our legitimate interests or those of a third party
6. Data Protection Principles
We ensure that personal data is:
- Processed lawfully, fairly, and transparently
- Collected for specified, explicit, and legitimate purposes
- Adequate, relevant, and limited to what is necessary
- Accurate and kept up to date
- Kept only as long as necessary
- Processed securely
7. International Data Transfers
If we transfer your personal data outside the UK, we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses approved by the ICO
- Adequacy decisions by the UK government
- Binding corporate rules
8. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach.
9. Complaints
If you believe we have not handled your personal data in accordance with UK GDPR, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
10. Updates to This Information
We may update this GDPR information from time to time. Please check this page regularly for updates.
11. Contact for Data Protection Queries
For any questions regarding our GDPR compliance or data protection practices, please contact us at:
Email: [email protected]