Last updated: September 8, 2026
Cedar Reed is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our commitment to protecting your personal data and your rights under these regulations.
Cedar Reed Environmental Consulting is the data controller responsible for your personal information. Our contact details are:
Cedar Reed Environmental Consulting
42 Division Street
Sheffield S1 4GF
United Kingdom
[email protected]
We process personal data only when we have a lawful basis to do so. The lawful bases we rely on include:
You have the following rights regarding your personal data:
You have the right to be informed about the collection and use of your personal data. This is outlined in our Privacy Policy.
You have the right to request access to your personal data and obtain a copy of the information we hold about you.
You have the right to request correction of inaccurate or incomplete personal data we hold about you.
You have the right to request deletion of your personal data in certain circumstances, including:
You have the right to request restriction of processing your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
We do not use automated decision making or profiling. If this changes, we will update this notice and ensure appropriate safeguards are in place.
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two months and will inform you of the extension.
We may request additional information to verify your identity before processing your request.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights, we will also notify you directly.
We do not routinely transfer personal data outside the United Kingdom. If we do need to transfer data internationally, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Specific retention periods are outlined in our Privacy Policy.
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: www.ico.org.uk
We may update this GDPR compliance notice to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.