GDPR Compliance

Last updated: 25 June 2026

Our Commitment to GDPR

rustic-marsh is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contractual necessity: Processing your information to fulfill quote requests and complete orders
• Legitimate interests: Maintaining business records and improving our services
• Consent: Marketing communications, where applicable
• Legal obligation: Complying with accounting and tax requirements

Data Controller Information

rustic-marsh acts as the data controller for personal information collected through our website and services. Our business address is:

42 Westbourne Gardens
London, W2 5RT
United Kingdom

Your GDPR Rights

Right to Access

You can request a copy of the personal data we hold about you. We will provide this information within one month of your request.

Right to Rectification

If you believe any information we hold is inaccurate or incomplete, you can request correction.

Right to Erasure

You can request deletion of your personal data in certain circumstances, subject to legal retention requirements.

Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations.

Right to Data Portability

You can request your personal data in a structured, commonly used format for transfer to another service provider.

Right to Object

You can object to processing of your personal data for specific purposes, including direct marketing.

Rights Related to Automated Decision Making

We do not use automated decision making or profiling that produces legal effects or similarly significant impacts.

How to Exercise Your Rights

To exercise any of your GDPR rights, contact us at [email protected] with "GDPR Request" in the subject line. We will respond within one month.

Data Protection Officer

For matters specifically related to data protection, you can contact our data protection officer at [email protected]

International Data Transfers

Your personal data is stored and processed within the United Kingdom. If international transfer becomes necessary, we ensure appropriate safeguards are in place.

Data Breach Notification

In the event of a data breach likely to result in high risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach.

Complaints

If you believe we have not complied with GDPR requirements, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Website: ico.org.uk

Updates to This Notice

We may update this GDPR notice to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.