We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
alpine-lagoon acts as the data controller for personal information collected through our website and services. We determine how and why your personal data is processed.
Contact details:
alpine-lagoon
127 Harborne Park Road
Birmingham B17 0BH
United Kingdom
Email: [email protected]
The GDPR provides you with specific rights regarding your personal data:
You have the right to obtain confirmation that we are processing your data and to receive a copy of your personal information. We will provide this within one month of your request.
If your personal data is inaccurate or incomplete, you have the right to have it corrected. We will update our records promptly upon notification.
Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.
You can request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of the data or object to our processing.
You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds.
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
We process personal data only when we have a lawful basis to do so:
We adhere to the GDPR's core principles by ensuring that personal data is:
Your personal data is stored and processed within the United Kingdom. We do not routinely transfer personal data outside the UK or European Economic Area. If such transfers become necessary, we will ensure appropriate safeguards are in place.
We implement technical and organizational measures to protect personal data against:
These measures include access controls, encryption, regular security assessments, and staff training on data protection requirements.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals without undue delay.
We work with carefully selected service providers who process data on our behalf. These processors are bound by data processing agreements that require them to:
To exercise any of your GDPR rights, please contact us at [email protected]. Include your full name and sufficient information to identify your records.
We will respond to your request within one month. In complex cases, this may be extended by an additional two months, and we will inform you of any such extension.
You also have the right to lodge a complaint with the Information Commissioner's Office if you believe we have not handled your data appropriately:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Last updated: August 19, 2026