GDPR Compliance Statement

Last updated: August 13, 2026

Our Commitment to Data Protection

laminsimbo is committed to protecting your personal data in accordance with the General Data Protection Regulation and UK data protection laws. This document outlines our compliance practices and your rights under these regulations.

Legal Basis for Processing

We process your personal data on the following legal bases:

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within one month of your request.

Right to Rectification

If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent.

Right to Restrict Processing

You may request that we limit the way we use your data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling in our processing of your personal data.

Data Protection Officer

For questions regarding data protection or to exercise your rights, please contact us at [email protected]

International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place to protect your information.

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in our Privacy Policy or as required by law. Booking and transaction records are typically retained for seven years to comply with financial regulations.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

How to Exercise Your Rights

To exercise any of your rights under GDPR, please send a written request to [email protected] with the subject line "GDPR Request". We will respond within one month of receiving your request.

Complaints

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Information Commissioner's Office in the UK.

Updates to This Statement

We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date.