Legal
Crystal Waters Concierge is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our approach to data protection and your rights as a data subject.
The UK GDPR applies to our business because we process personal data of individuals in the United Kingdom. Our full Privacy Policy, which should be read alongside this page, is available at crystalwatersconcierge.co.uk/privacy-policy.
Under the UK GDPR and Data Protection Act 2018, we must have a lawful basis for processing your personal data. We rely on the following bases depending on the nature of the processing:
Contractual Necessity
Processing required to fulfil our service agreement with you — e.g. managing your property, coordinating contractors, issuing invoices.
Legal Obligation
Processing required to comply with our legal duties — e.g. HMRC record keeping, responding to lawful requests from authorities.
Legitimate Interests
Processing for our legitimate business interests where these are not overridden by your rights — e.g. improving our services, sending operational updates.
Our data processing activities are built around the six principles of the UK GDPR:
Lawfulness, Fairness & Transparency
We only process your personal data where we have a lawful basis to do so, and we are transparent about how and why we use it.
Purpose Limitation
Your data is collected for specified, explicit, and legitimate purposes and is not processed in a manner incompatible with those purposes.
Data Minimisation
We collect only the personal data that is necessary for the purposes for which it is processed — nothing more.
Accuracy
We take reasonable steps to ensure personal data is accurate and, where necessary, kept up to date. Please inform us if your details change.
Storage Limitation
Personal data is retained only for as long as necessary. Our full retention schedule is set out in our Privacy Policy.
Integrity & Confidentiality
We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, or destruction.
Under the UK GDPR, you have the following rights. To exercise any of these rights, please contact us in writing at crystalwatersconcierge@outlook.com. We will respond within one calendar month. There is no charge for exercising your rights.
Right of Access
Request a copy of the personal data we hold about you (Subject Access Request). We will respond within one calendar month.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where there is no compelling reason for us to continue processing it.
Right to Restrict Processing
Ask us to restrict or suspend the processing of your personal data in certain circumstances.
Right to Data Portability
Receive your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
Right to Object
Object to processing of your personal data where we rely on legitimate interests as our lawful basis.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
Complain to the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113 if you believe your data rights have been violated.
We do not ordinarily transfer personal data outside the United Kingdom. Where any such transfer is necessary (for example, when engaging cloud software providers), we ensure appropriate safeguards are in place in accordance with UK GDPR Chapter V, including adequacy regulations or standard contractual clauses.
If you have any concerns about how we handle your personal data, or wish to exercise your rights, please contact us in writing. We will acknowledge your request within 3 business days and respond within one calendar month:
Crystal Waters Concierge
Sandbanks, Poole, Dorset
Email: crystalwatersconcierge@outlook.com
Telephone: 01202 912133
You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by telephone on 0303 123 1113.
© 2026 Crystal Waters Concierge. All rights reserved.
Registered in England & Wales. VAT registration details available on request.
Your data, your choice
We use strictly necessary cookies to run this site. With your permission, we also use analytics and marketing cookies to improve our service. You can change your choice any time in our GDPR policy. See our Privacy Policy.