Your data protection rights explained
primal-energize is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we comply with data protection legislation and explains your rights.
primal-energize is the data controller for the personal information we collect through our website and services. Our contact details are:
primal-energize
47 George Street
Edinburgh EH2 2HT
United Kingdom
Email: [email protected]
You have the right to be informed about how we collect and use your personal data. We provide this information through our Privacy Policy and this GDPR page.
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.
You have the right to request that we correct any inaccurate personal data we hold about you. If your data is incomplete, you can request that we complete it.
Also known as the "right to be forgotten", you can request that we delete your personal data in certain circumstances, including when:
You can request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.
Where we process your data based on consent or for a contract, and the processing is automated, you have the right to receive your data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making in our services.
To exercise any of your GDPR rights, please contact us at:
Email: [email protected]
Subject line: "GDPR Request - [Your Right]"
We will respond to your request within one month. In complex cases, we may extend this by two months, but we will inform you within the first month if this is necessary.
To protect your data, we may need to verify your identity before fulfilling your request. We may ask for:
We collect data about children only with parental consent as part of our educational services. Parents or guardians can exercise GDPR rights on behalf of their children. If you believe we have collected data about a child without appropriate consent, please contact us immediately.
We process personal data for the following purposes:
We implement appropriate technical and organisational measures to protect personal data, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours. If the breach is likely to result in a high risk to you, we will also notify you directly.
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.
Last updated: May 2026