Last updated: August 19, 2026
Overview
valley-gate is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we comply with GDPR principles and how you can exercise your data protection rights.
Data Controller Information
For the purposes of data protection legislation, valley-gate acts as the data controller for personal information collected through our website and business operations.
Contact details:
valley-gate
42 Arundel Gate
Sheffield, South Yorkshire
S1 2PN
United Kingdom
Email: dataprotection at valley-gate.com
GDPR Principles
We process personal data in accordance with the following GDPR principles:
Lawfulness, Fairness, and Transparency
We process personal data lawfully, fairly, and in a transparent manner. We clearly communicate what data we collect, why we collect it, and how we use it.
Purpose Limitation
We collect personal data for specified, explicit, and legitimate purposes. We do not process data in ways incompatible with these purposes.
Data Minimization
We collect only personal data that is adequate, relevant, and limited to what is necessary for our stated purposes.
Accuracy
We take reasonable steps to ensure personal data is accurate and kept up to date. Inaccurate data is corrected or erased without delay.
Storage Limitation
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law.
Integrity and Confidentiality
We implement appropriate technical and organizational measures to ensure data security, protecting against unauthorized or unlawful processing and accidental loss, destruction, or damage.
Accountability
We demonstrate compliance with GDPR principles through documented policies, procedures, and data protection impact assessments where appropriate.
Your Rights Under GDPR
Right to be Informed
You have the right to clear, transparent information about how we use your personal data. This information is provided through our Privacy Policy and this GDPR page.
Right of Access
You have the right to request access to your personal data. This is known as a subject access request and allows you to receive a copy of the personal data we hold about you.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Also known as the right to be forgotten, you can request deletion of your personal data in certain circumstances, including:
- The data is no longer necessary for the purpose it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
- Erasure is required to comply with a legal obligation
Right to Restrict Processing
You have the right to request restriction of processing your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently employ automated decision-making systems.
How to Exercise Your Rights
To exercise any of your data protection rights, please contact us using the following methods:
- Email: dataprotection at valley-gate.com
- Post: valley-gate, 42 Arundel Gate, Sheffield, South Yorkshire, S1 2PN, United Kingdom
When submitting a request, please provide:
- Your full name and contact information
- Details of the specific right you wish to exercise
- Any relevant information that helps us locate your data
- Proof of identity (we may request additional verification to protect your data)
Response Timeframes
We will respond to rights requests without undue delay and within one month of receipt. In complex cases, we may extend this period by two additional months, in which case we will inform you of the extension and reasons within the initial month.
Data Retention Periods
We retain different types of personal data for varying periods based on legal requirements and business needs:
- Consultation inquiries: Seven years from last contact
- Project records: Seven years following project completion
- Financial records: As required by UK tax and accounting regulations
- Marketing communications: Until consent is withdrawn or contact becomes inactive
- Website analytics: 26 months from collection
Data Security Measures
We implement robust security measures to protect personal data:
- Encryption of data in transit using SSL/TLS protocols
- Secure storage with access controls and authentication
- Regular security audits and vulnerability assessments
- Staff training on data protection responsibilities
- Incident response procedures for potential data breaches
Data Breach Notification
In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also report qualifying breaches to the Information Commissioner's Office within 72 hours of becoming aware of the breach.
International Data Transfers
We primarily process personal data within the United Kingdom. If we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK authorities.
Children's Privacy
Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it promptly.
Complaints and Supervisory Authority
If you believe we have not handled your personal data properly or have concerns about our data processing activities, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: ico.org.uk
Updates to GDPR Compliance
We regularly review our data protection practices to ensure continued compliance with evolving regulations and best practices. This page will be updated to reflect any significant changes to our approach.