GDPR Compliance

Last Updated: July 2026

1. Our Commitment to GDPR

Sage Crater is committed to protecting your personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. This page outlines how we comply with GDPR principles and your rights as a data subject.

2. Data Controller

Sage Crater acts as the data controller for personal information collected through our website and consultation services. We determine how and why your data is processed.

Contact Details:
Email: [email protected]
Address: 47 Deansgate, Manchester M3 2AY, United Kingdom

3. Lawful Basis for Processing

We process personal data under the following lawful bases as defined by GDPR:

• Article 6(1)(b) - Contractual Necessity: Processing is necessary to deliver the consultation services you have requested
• Article 6(1)(f) - Legitimate Interests: We process data to maintain business records, improve services, and prevent fraud
• Article 6(1)(c) - Legal Obligation: We retain records to comply with tax, accounting, and regulatory requirements
• Article 6(1)(a) - Consent: For marketing communications and non-essential cookies, we rely on your explicit consent

4. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

4.1 Right of Access (Article 15)

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.

4.2 Right to Rectification (Article 16)

If the personal data we hold about you is inaccurate or incomplete, you have the right to request correction.

4.3 Right to Erasure (Article 17)

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected, or if you withdraw consent.

4.4 Right to Restriction (Article 18)

You can request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data.

4.5 Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.

4.6 Right to Object (Article 21)

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds.

4.7 Rights Related to Automated Decision Making (Article 22)

We do not use automated decision-making or profiling that produces legal effects concerning you.

5. How to Exercise Your Rights

To exercise any of your GDPR rights, send a written request to [email protected]. Include your full name and the specific right you wish to exercise. We may request identification verification before processing your request.

6. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy:

• Consultation Records: 7 years following last interaction
• Marketing Consent: Until you withdraw consent or 3 years of inactivity
• Website Analytics: 26 months

7. Data Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Access controls limiting staff access to personal data
• Regular security assessments and updates
• Confidentiality agreements with all staff and contractors

8. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office within 72 hours of becoming aware of the breach, as required by Article 33 of GDPR.

9. International Data Transfers

Your personal data is processed and stored within the United Kingdom. We do not transfer personal data outside the UK. If this changes, we will ensure appropriate safeguards are in place as required by GDPR.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

11. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

12. Updates to GDPR Compliance

We regularly review our GDPR compliance procedures. Any material changes will be communicated through this page with an updated revision date.

13. Contact Our Data Protection Team

For any questions regarding GDPR compliance or data protection, contact us at:
Email: [email protected]