Pearl-basin is committed to complying with the UK General Data Protection Regulation and Data Protection Act 2018 in all aspects of our data processing activities.
Last updated: 1 September 2026
Pearl Basin Heritage Consultancy is the data controller responsible for your personal information. We determine how and why your data is processed.
Registered address:
14 Cathedral Close
Bath, BA1 5LS
United Kingdom
We process personal data under the following lawful bases:
Under GDPR, you have the following rights regarding your personal data:
You can request a copy of the personal data we hold about you. We will provide this within one month of your request, free of charge.
If information we hold about you is inaccurate or incomplete, you have the right to have it corrected.
You can request deletion of your personal data in certain circumstances, including where:
You can request that we restrict processing of your data in certain situations, such as when you contest the accuracy of the data or object to processing.
Where processing is based on consent or contract and is carried out by automated means, you can request that we provide your data in a structured, commonly used, machine-readable format or transfer it directly to another controller.
You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such processing.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by up to two months and will inform you of any delay.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach.
We do not routinely transfer personal data outside the United Kingdom. If such transfer becomes necessary, we will ensure appropriate safeguards are in place in accordance with GDPR requirements.
Our services are not directed at children under 16. When providing educational programmes involving minors, we obtain parental or guardian consent before processing any personal data.
For data protection enquiries, please contact our compliance officer at [email protected].
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk
We review our GDPR compliance procedures regularly and may update this statement to reflect changes in law or our practices. Please check this page periodically for updates.