Your data protection rights under UK GDPR
Last Updated: May 2026
luminous-rider is fully committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we comply with these regulations and explains your rights as a data subject.
luminous-rider acts as the data controller for personal information collected through our website and services. This means we determine how and why your personal data is processed.
Contact Details:
luminous-rider
Unit 14, Media Village
Hackney Road
London E2 8QH
Email: [email protected]
We only process personal data when we have a lawful basis to do so. Our processing activities rely on one or more of the following:
Under UK GDPR, you have the following rights regarding your personal data:
You have the right to be informed about how we collect and use your personal data. Our Privacy Policy and this GDPR page fulfil this requirement.
You have the right to request a copy of the personal information we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond within one month of receiving your request.
You have the right to request correction of personal data if it is inaccurate or incomplete. We will respond within one month.
Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose or you withdraw consent.
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of data or object to processing.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
To exercise any of your rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests.
There is no fee for exercising your rights, unless requests are manifestly unfounded or excessive.
We implement appropriate technical and organisational measures to protect personal data, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. If the breach is likely to result in high risk to you, we will also notify you directly.
We primarily store and process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
We conduct Data Protection Impact Assessments (DPIAs) when implementing new processing activities that may result in high risk to individuals' rights and freedoms.
If you believe we have not handled your personal data in accordance with the law, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR information periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.