Last Updated: June 15, 2026
reed-mongoose is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we comply with data protection legislation and outlines your rights as a data subject.
reed-mongoose acts as the data controller for personal information collected through our website and services. We determine how and why your personal data is processed.
Data Controller Contact Details:
reed-mongoose
Queen Square
Bristol BS1 4JQ
United Kingdom
Email: [email protected]
We only process your personal data when we have a lawful basis to do so under UK GDPR. The lawful bases we rely on include:
We process certain data based on your explicit consent. You have the right to withdraw consent at any time by contacting us.
When you engage our services, we process your data to fulfill our contractual obligations to you.
We may process data where we have legitimate business interests, provided these interests do not override your fundamental rights and freedoms.
In some cases, we process data to comply with legal requirements, such as financial record-keeping obligations.
Under UK GDPR, you have the following rights regarding your personal data:
You have the right to clear, transparent information about how we use your personal data. This information is provided in our Privacy Policy and this GDPR page.
You can request a copy of the personal data we hold about you. This is commonly known as a "subject access request." We will provide this information free of charge within one month of your request.
If personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected or completed.
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
You can request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.
You have the right to obtain and reuse your personal data for your own purposes across different services. We will provide your data in a structured, commonly used, and machine-readable format.
You can object to processing of your personal data in certain circumstances, particularly when we process data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you. We do not currently use automated decision-making processes.
To exercise any of your data protection rights, please contact us using the details provided above. We will respond to your request within one month, though this may be extended by two additional months for complex requests.
To protect your privacy and security, we may need to verify your identity before fulfilling your request. This typically involves confirming identifying information you have previously provided to us.
We do not charge a fee for most requests to exercise your data protection rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
We do not sell your personal data. We may share data with:
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
We retain your personal data only as long as necessary for the purposes it was collected or as required by law. Financial consultation records are typically retained for seven years to comply with professional standards and tax regulations.
Our retention periods are based on:
We process and store data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, as required by UK GDPR.
Our services are not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.
We may update this GDPR information periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.
If you are not satisfied with how we have handled your personal data or responded to your requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
If you have questions about our GDPR compliance, wish to exercise your data protection rights, or need further information, please contact us:
reed-mongoose
Queen Square
Bristol BS1 4JQ
United Kingdom
Email: [email protected]