GDPR Compliance

Our Commitment to GDPR

Glacier Labs is fully committed to compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We recognise the importance of protecting personal data and upholding the privacy rights of individuals who interact with our services.

Data Controller Information

For the purposes of GDPR, Glacier Labs acts as the data controller for personal information collected through our website and services.

Contact details:
Glacier Labs
47 Victoria Square
Birmingham, B1 1BD
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contract: Processing necessary to fulfil travel booking contracts and provide requested services
• Legitimate Interests: Processing for business purposes such as improving our services, fraud prevention, and direct marketing to existing customers
• Consent: Where you have provided explicit consent for specific processing activities
• Legal Obligation: Processing required to comply with applicable laws and regulations

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information within one month of receiving a valid request.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or when you withdraw consent.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data.

Right to Data Portability

Where processing is based on consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently employ automated decision-making in our services.

International Data Transfers

When we transfer personal data outside the UK or European Economic Area to fulfil travel bookings, we ensure appropriate safeguards are in place, including standard contractual clauses approved by regulatory authorities or transfers to countries with adequate data protection standards.

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. In the event of a breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the details provided above. We may need to verify your identity before processing your request. There is no charge for most requests, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

Complaints

If you are unsatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF
Website: ico.org.uk

Updates to This Information

We review our GDPR compliance measures regularly and will update this page to reflect any changes in our practices or legal requirements.