sepia-ember
Home About Services Contact Advertising Content

GDPR Compliance

Last updated: June 16, 2026

Our Commitment to GDPR

We are committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements.

Lawful Basis for Processing

We process your personal data based on the following lawful grounds:

  • Consent: When you provide explicit consent for specific processing activities
  • Contractual necessity: To fulfill our obligations when providing services to you
  • Legitimate interests: For business operations that do not override your rights
  • Legal obligations: When required by law

Your GDPR Rights

As a data subject under GDPR, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain conditions.

Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you in a structured, commonly used format.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month.

Data Protection Officer

For questions regarding GDPR compliance or data protection, you may contact our data protection contact at [email protected]

Data Transfers

We primarily process data within the European Economic Area. Any international data transfers are conducted with appropriate safeguards in accordance with GDPR requirements.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. In the United Kingdom, the supervisory authority is the Information Commissioner's Office (ICO).

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children without parental consent.

Updates to This Page

We may update this GDPR compliance information periodically. The last updated date will reflect the most recent changes.

sepia-ember

Supporting graduate entrepreneurs in building sustainable startups through structured consultation and practical frameworks.

Quick Links

  • About Us
  • Services
  • Contact

Legal

  • Privacy Policy
  • GDPR
  • Cookies Policy
  • Terms of Use

© 2026 sepia-ember. All rights reserved.