GDPR Compliance
Last updated: 21 July 2026
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. Although the United Kingdom has left the European Union, the UK GDPR and Data Protection Act 2018 provide equivalent protections. This page outlines how we comply with these regulations.
Data Controller
jolly-roam is the data controller responsible for your personal data. Our contact details are:
Email: [email protected]
Address: 14 Westbrook Lane, Bristol, BS8 2QT, United Kingdom
Your Rights Under GDPR
Under data protection legislation, you have the following rights:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will respond to your request within one month.
Right to Rectification
You have the right to request that we correct any personal data you believe is inaccurate. You also have the right to request we complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
Right to Object
You have the right to object to our processing of your personal data under certain circumstances, including processing for direct marketing purposes.
How We Protect Your Data
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Secure storage of personal data
- Limited access to personal data on a need-to-know basis
- Regular review of our data protection practices
- Staff training on data protection responsibilities
Lawful Basis for Processing
We only process personal data when we have a lawful basis to do so. The lawful bases we rely on are:
- Consent: You have given clear consent for us to process your personal data for a specific purpose.
- Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
- Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.
Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
International Transfers
We do not routinely transfer personal data outside of the United Kingdom. If we do need to transfer data internationally, we will ensure appropriate safeguards are in place to protect your data.
Automated Decision Making
We do not use automated decision-making or profiling in ways that have legal or similarly significant effects on individuals.
Exercising Your Rights
To exercise any of your rights, please contact us using the details provided above. We may need to verify your identity before processing your request. There is no fee for exercising your rights, although we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
ICO Website: ico.org.uk