Last Updated: 8 September 2026
SpireThorn Consulting Ltd is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We implement appropriate measures to ensure personal data is processed lawfully, fairly, and transparently.
SpireThorn Consulting Ltd acts as the data controller for personal information collected through this website and during service delivery. We determine the purposes and means of processing your personal data.
Registered Address:
SpireThorn Consulting Ltd
42 Maritime House, Ocean Way
Southampton SO14 3TL
United Kingdom
We process personal data under the following lawful bases as defined by UK GDPR:
Under UK GDPR, you have the following rights regarding your personal data:
You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies if requests are manifestly unfounded or excessive.
You have the right to request correction of inaccurate personal data and completion of incomplete data.
You have the right to request deletion of your personal data in certain circumstances, including where data is no longer necessary for the original purpose or where consent is withdrawn.
You have the right to request restriction of processing in specific situations, such as when you contest data accuracy or object to processing.
Where technically feasible, you have the right to request transfer of your data to another organisation or directly to you in a structured, commonly used format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.
To exercise any of these rights, contact us at:
Email: [email protected]
Post: Data Protection Officer, SpireThorn Consulting Ltd, 42 Maritime House, Ocean Way, Southampton SO14 3TL
We will respond to requests within one month. If your request is particularly complex or you have made multiple requests, we may extend this period by two months and will notify you accordingly.
We implement appropriate technical and organisational measures to ensure data security commensurate with the risks, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach poses a high risk, we will also notify affected individuals without undue delay.
We primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure adequate safeguards are in place, such as standard contractual clauses approved by the ICO or transfers to countries with adequacy decisions.
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk
We review and update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.
For questions about data protection or to exercise your rights, contact:
Email: [email protected]
Post: SpireThorn Consulting Ltd, 42 Maritime House, Ocean Way, Southampton SO14 3TL, United Kingdom