GDPR Compliance

Last updated: May 21, 2026

Our Commitment to GDPR

neat-stream is committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Economic Area (EEA).

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to fulfill our contractual obligations to you
• Legal Obligation: When we must process data to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests, balanced against your rights

Your GDPR Rights

Right to Access

You have the right to request access to the personal data we hold about you. We will provide a copy of your data in a commonly used electronic format.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.

Data Protection Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Staff training on data protection
• Incident response procedures

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

International Data Transfers

We primarily process data within the EEA. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequacy decisions
• Other legally approved transfer mechanisms

Data Protection Officer

For questions about our GDPR compliance or to exercise your rights, please contact our Data Protection Officer:

Email: [email protected]
Address: 47 Redchurch Street, Shoreditch, London E2 7DJ, United Kingdom

Response Time

We will respond to requests to exercise your GDPR rights within one month of receipt. In complex cases, this may be extended by two additional months, and we will inform you of any such extension.

Supervisory Authority

In the United Kingdom, the relevant supervisory authority is:

Information Commissioner's Office (ICO)
Website: neat-stream.com