Understanding your data protection rights
Last updated: September 2026
Dream-pebble is committed to ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we meet our obligations and outlines your rights under data protection law.
Dream-pebble is the data controller responsible for your personal data collected through this website. Our contact details are:
Dream-pebble
47 Museum Quarter
Bristol, BS1 4QH
United Kingdom
Email: [email protected]
We adhere to the following data protection principles when processing personal data:
You have the following rights regarding your personal data:
You have the right to know how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR notice.
You can request a copy of the personal data we hold about you. We will respond to such requests within one month.
If your personal data is inaccurate or incomplete, you have the right to have it corrected. Contact us to request corrections.
In certain circumstances, you have the right to request deletion of your personal data. This includes situations where the data is no longer necessary for its original purpose or where you withdraw consent.
You can request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your data in a structured, commonly used format.
You can object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making processes.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, this may be extended by up to two additional months, and we will inform you if this is necessary.
We may request verification of your identity before processing your request to ensure the security of your personal data.
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Where the breach is likely to result in a high risk, we will also notify affected individuals directly.
Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office.
If you are unsatisfied with how we handle your personal data or your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR notice periodically to reflect changes in our practices or legal requirements. We encourage you to review this page regularly.