GDPR Compliance Statement

Last updated: September 29, 2026

Our Commitment to Data Protection

River-manta Services Ltd is committed to compliance with the UK General Data Protection Regulation and Data Protection Act 2018. We recognize the importance of protecting personal data and maintaining the trust of our clients.

Data Controller Information

River-manta Services Ltd acts as the data controller for personal information collected through our services and website.

Registered Address:
42 Harrington Gardens
Kensington
London SW7 4JU
United Kingdom

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contractual Necessity: Processing required to fulfill service agreements with our clients
• Legitimate Interests: Operations necessary for our business purposes that do not override individual rights
• Legal Obligation: Compliance with UK laws and regulatory requirements
• Vital Interests: Protection of life in emergency response situations
• Consent: Explicit permission for specific processing activities

Individual Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access

You may request a copy of the personal data we hold about you. We will respond within one month of receiving your request.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

In certain circumstances, you may request deletion of your personal data. This right is subject to legal retention requirements.

Right to Restrict Processing

You may request limitation of how we process your data in specific situations.

Right to Data Portability

Where applicable, you can request transfer of your data to another service provider in a structured, commonly used format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts.

Data Protection by Design

We implement data protection principles throughout our service design and operations:

• Data minimization—collecting only necessary information
• Purpose limitation—using data only for specified purposes
• Accuracy—maintaining correct and current records
• Storage limitation—retaining data only as long as required
• Integrity and confidentiality—protecting data security
• Accountability—demonstrating compliance with principles

International Data Transfers

We primarily process data within the United Kingdom. Any international transfers are conducted in accordance with GDPR requirements using appropriate safeguards such as standard contractual clauses.

Data Breach Notification

In the event of a personal data breach that poses risks to individual rights and freedoms, we will notify affected individuals and the Information Commissioner's Office within 72 hours of becoming aware of the breach.

How to Exercise Your Rights

To exercise any GDPR rights or raise concerns about our data practices:

Email: [email protected]
Subject line: GDPR Request

We will verify your identity before processing requests and respond within the timeframes required by law.

Right to Lodge a Complaint

If you believe our processing of your personal data violates data protection law, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

Updates to This Statement

We review and update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements.