GDPR Compliance Statement

Last Updated: 19 June 2026

Our Commitment

Prime Sparrow is committed to compliance with the General Data Protection Regulation and the UK Data Protection Act 2018. We respect your privacy rights and handle your personal data with care and transparency.

Data Controller

Prime Sparrow acts as the data controller for personal information collected through this website. Our contact details are:

Prime Sparrow
42 Glossop Road
Sheffield S10 2PQ
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data only where we have a lawful basis to do so:

  • Consent: You have given clear consent for us to process your personal data for specific purposes
  • Contract: Processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract
  • Legal obligation: Processing is necessary for compliance with legal requirements
  • Legitimate interests: Processing is necessary for our legitimate business interests, provided these do not override your fundamental rights

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You may request that we limit how we use your personal data in specific situations.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You may object to processing of your personal data where we rely on legitimate interests as the legal basis.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended by two months for complex requests.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication procedures
  • Staff training on data protection

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay.

International Data Transfers

We primarily process data within the United Kingdom. Any international transfers of personal data are conducted in accordance with GDPR requirements, using appropriate safeguards.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk

Updates to This Statement

We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. Please review this page regularly.