GDPR Compliance Statement

Last Updated: November 2026

Our Commitment

Verse-cypress is committed to complying with the General Data Protection Regulation (GDPR) and protecting the rights of individuals whose personal data we process. This statement outlines how we fulfill our obligations under GDPR.

Data Controller Information

Verse-cypress acts as the data controller for personal information collected through our website and services. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: Where you have explicitly agreed to our processing activities
• Contract: When processing is necessary to fulfill our service obligations
• Legitimate Interests: For business operations that do not override your rights
• Legal Obligation: Where required by United Kingdom or European Union law

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure

You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for its original purpose.

Right to Restriction

You can request that we limit processing of your data in specific situations, such as when you contest its accuracy.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant consequences.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with your request. We will respond within one month, though this may be extended by two additional months for complex requests.

Data Protection Principles

We adhere to the following GDPR principles:

• Lawfulness, fairness, and transparency in processing
• Purpose limitation for specified, explicit purposes
• Data minimization, collecting only necessary information
• Accuracy and keeping data up to date
• Storage limitation, retaining data only as long as necessary
• Integrity and confidentiality through appropriate security

Data Breach Notification

In the event of a data breach that poses risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

International Data Transfers

When transferring data outside the United Kingdom or European Economic Area, we ensure appropriate safeguards are in place through adequacy decisions or standard contractual clauses.

Complaints

If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.

Contact for Data Protection Matters

For questions about our GDPR compliance or to exercise your rights, contact [email protected]