GDPR Compliance

D&H Publishing International is a UK-based data controller under the UK GDPR and Data Protection Act 2018. This page sets out your rights and how we comply with them.

1. Lawful Basis

We process your personal data under the following lawful bases: (a) performance of a contract (providing the Services you signed up for); (b) legal obligation (retaining records for tax and accounting); and (c) legitimate interests (basic analytics to improve the platform).

2. Your Rights

Under the UK GDPR you have the following rights:

• Right of access - request a copy of the personal data we hold about you.
• Right to rectification - correct inaccurate or incomplete data.
• Right to erasure - request deletion of your data ("right to be forgotten").
• Right to restrict processing - ask us to limit how we use your data.
• Right to data portability - receive your data in a structured, machine-readable format.
• Right to object - object to processing based on legitimate interests.
• Right to withdraw consent - withdraw consent for any processing based on it at any time.

3. Making a Request

To exercise any of these rights, email hello@dhpublishing.com with the subject line "Data Request". We will respond within one month. We may ask for identity verification before releasing data.

4. International Transfers

Your data is stored on servers located in the UK and EU. Where any data is processed outside the UK/EEA, we rely on UK International Data Transfer Agreements or adequacy regulations to ensure appropriate safeguards.

5. Data Protection Officer

As a small organisation we are not required to appoint a Data Protection Officer. All data protection matters are handled by the company directors. You can reach us at hello@dhpublishing.com.

6. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by phone on 0303 123 1113.