GDPR Compliance

Last Updated: 1 September 2026

1. Introduction to GDPR

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. frost-perch is committed to complying with GDPR and protecting the personal data of all individuals who interact with our services.

2. Data Controller Information

frost-perch acts as the data controller for personal information collected through our website and services. As the data controller, we determine the purposes and means of processing personal data.

Data Controller: frost-perch
Address: 42 Merrion Square, Dublin 2, Ireland
Email: [email protected]

3. Legal Basis for Processing

We process personal data under the following legal bases as defined by GDPR:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you or to take steps prior to entering into a contract
• Legal Obligation: Where processing is necessary for compliance with a legal obligation
• Legitimate Interests: Where processing is necessary for our legitimate interests, provided these are not overridden by your rights

4. Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

4.1 Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service if the request is manifestly unfounded or excessive.

4.2 Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

4.3 Right to Erasure

You have the right to request that we erase your personal data, under certain conditions. This right is also known as the "right to be forgotten."

4.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

4.5 Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions, particularly where we process data based on legitimate interests.

4.6 Right to Data Portability

You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

5. Data We Collect

We collect and process the following categories of personal data:

• Identity Data: Name, title, company name
• Contact Data: Email address, business address
• Technical Data: IP address, browser type, device information
• Usage Data: Information about how you use our website
• Communication Data: Messages and correspondence you send to us

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our retention periods are determined by:

• The nature of the data and why it was collected
• Legal, regulatory, and contractual requirements
• Ongoing legitimate business purposes

When personal data is no longer required, we securely delete or anonymise it.

7. International Transfers

We primarily process data within the European Economic Area (EEA). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Transfers to countries with adequate data protection laws
• Standard contractual clauses approved by the European Commission
• Other legally approved transfer mechanisms

8. Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest where appropriate
• Regular security assessments and updates
• Access controls limiting data access to authorised personnel
• Staff training on data protection and security

9. Data Breach Procedures

In the event of a personal data breach, we have procedures in place to:

• Detect and investigate the breach promptly
• Assess the risk to individuals
• Notify the Data Protection Commission within 72 hours where required
• Communicate with affected individuals where there is a high risk to their rights and freedoms

10. Children's Data

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

11. Exercising Your Rights

To exercise any of your rights under GDPR, please contact us using the details below. We will respond to your request within one month. In complex cases, this period may be extended by up to two additional months, and we will inform you of any such extension.

We may request specific information from you to help us confirm your identity and ensure we are dealing with the correct individual.

12. Complaints

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Website: www.dataprotection.ie

13. Contact Us

For any questions about this GDPR statement or to exercise your data protection rights, please contact us at:

frost-perch
42 Merrion Square
Dublin 2, Ireland
Email: [email protected]