Last Updated: August 19, 2026
vibrant-spire.com is committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection legislation. This page provides specific information about your rights and our obligations under these regulations.
The data controller responsible for your personal information is:
vibrant-spire
142 West George Street
Glasgow G2 2HG
United Kingdom
Email: [email protected]
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information within one month of receiving your request.
If personal information we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that data.
Under certain circumstances, you have the right to request deletion of your personal data. This right is not absolute and may be limited by legal obligations to retain certain records.
You may request that we limit how we use your personal data in specific circumstances, such as when you contest the accuracy of the data or object to our processing.
Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.
We do not currently engage in automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, contact us at [email protected] with sufficient information to verify your identity and specify which right you wish to exercise.
We will respond to requests within one month. In complex cases, this period may be extended by two additional months, and we will inform you of any such extension.
We process personal data based on the following legal grounds:
We primarily process data within the United Kingdom and European Economic Area. If data is transferred outside these regions, appropriate safeguards are implemented in accordance with GDPR requirements.
Personal data is retained only as long as necessary for the purposes for which it was collected or as required by law. Specific retention periods include:
We implement appropriate technical and organizational measures to ensure data security, including:
In the event of a data breach that poses risks to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours of becoming aware of the breach, as required by GDPR.
When we engage third-party service providers who process personal data on our behalf, we ensure they provide sufficient guarantees regarding data protection through contractual arrangements.
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority.
For the United Kingdom, the relevant authority is:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children.
We may update this GDPR information to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.
For questions regarding data protection or to exercise your GDPR rights:
Email: [email protected]
Address: 142 West George Street, Glasgow G2 2HG, United Kingdom