GDPR Compliance

Last updated: November 2026

Our Commitment to Data Protection

Link-delta is committed to full compliance with the General Data Protection Regulation (GDPR) and related UK data protection legislation. This page explains how we meet our obligations and protect your rights under these regulations.

Data Controller Information

Link-delta acts as the data controller for personal information processed through our services and website. We determine the purposes and means of processing your personal data.

Registered Business Name: Link-delta
Address: 47 Wellington Street, Cheltenham, GL50 1XP, United Kingdom
Contact Email: [email protected]

Lawful Basis for Processing

We process personal data only when we have a lawful basis under GDPR Article 6:

Contractual Necessity

Processing is necessary to provide the safety monitoring services you have contracted for, including device management, alert response, and customer support.

Legitimate Interests

We have legitimate interests in processing certain data to operate our business effectively, prevent fraud, improve our services, and ensure network security. We balance these interests against your rights and freedoms.

Legal Obligations

We process data when required to comply with legal obligations, such as maintaining business records, cooperating with regulatory authorities, or responding to court orders.

Vital Interests

In emergency situations, we may process data to protect life or prevent serious harm to health, even without explicit consent.

Consent

For certain processing activities, such as marketing communications, we rely on your explicit consent, which you may withdraw at any time.

Your Rights Under GDPR

Right to Be Informed

You have the right to clear information about how we use your personal data, provided through this notice and our privacy policy.

Right of Access

You can request confirmation of what personal data we hold about you and receive a copy of that data. We will provide this within one month at no charge for the first request.

Right to Rectification

If personal data we hold is inaccurate or incomplete, you have the right to have it corrected or completed.

Right to Erasure

In certain circumstances, you can request deletion of your personal data. This right is not absolute and may not apply when we have legal obligations to retain information.

Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations, such as while we verify the accuracy of contested information.

Right to Data Portability

You have the right to receive personal data you provided to us in a structured, commonly used, machine-readable format, and to transmit it to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds that override your interests.

Rights Related to Automated Decision Making

While our monitoring systems use automated analysis, significant decisions affecting you are reviewed by trained personnel. You have the right to request human intervention in automated decisions.

How to Exercise Your Rights

To exercise any of your GDPR rights, submit a request to [email protected] with the following information:

  • Your full name and contact details
  • Specific right you wish to exercise
  • Details about the data or processing concerned
  • Proof of identity (if not an existing customer)

We will respond within one month. In complex cases, we may extend this by two additional months and will inform you of the extension.

Data Protection Principles

We adhere to GDPR data protection principles in all processing activities:

  • Lawfulness, Fairness, Transparency: We process data lawfully, fairly, and transparently
  • Purpose Limitation: We collect data for specified, explicit, legitimate purposes
  • Data Minimisation: We process only data adequate and relevant for our purposes
  • Accuracy: We maintain accurate and up-to-date records
  • Storage Limitation: We retain data only as long as necessary
  • Integrity and Confidentiality: We implement appropriate security measures
  • Accountability: We demonstrate compliance with these principles

Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for processing activities that pose high risks to individuals' rights and freedoms. Our monitoring services have undergone comprehensive DPIAs to identify and mitigate privacy risks.

Data Breach Procedures

We have procedures to detect, report, and investigate personal data breaches. If a breach poses a risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach. High-risk breaches are reported to the Information Commissioner's Office as required by law.

Third-Party Processors

When we engage third-party service providers who process personal data on our behalf, we ensure they:

  • Process data only on our documented instructions
  • Maintain appropriate security measures
  • Assist with our GDPR compliance obligations
  • Delete or return data when services conclude
  • Demonstrate their own GDPR compliance

International Data Transfers

Personal data is primarily processed within the UK and European Economic Area. Any transfers outside these regions are protected by appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Helpline: 0303 123 1113
Website: ico.org.uk

Updates to This Notice

We review this GDPR compliance notice regularly and update it to reflect changes in our practices or legal requirements. Significant changes will be communicated to active service users.