100% Serverless Jamstack | Outstatic Markdown CMS
UK GDPR Article 24 & DUAA Compliance

Privacy Policy & Documented Data Processing

Data Controller: Westbrook Laundry Ltd | Data Privacy Lead: `hello@itsmyapp.co.uk`

1. Documented Information Processing Points

We collect and process only the absolute minimum categories of personal data necessary to execute commercial laundry contracts and deliver customer inquiries:

  • Identity Data: First name, last name, or business title provided during form submission.
  • Contact Data: Email address, telephone number, and physical hospitality collection address (`TQ7` postal area).
  • Technical Data: Anonymized IP addresses, browser engine version, and local timezone parameters processed during form routing via FormSubmit.
  • System Usage Metrics: First-party anonymous interaction metrics measuring page load speeds and button clicks.

2. Recognized Legitimate Interests & Statutory Allowances

In alignment with the Data (Use and Access) Act (DUAA) statutory exemptions, processing operations regarding application stabilization, infrastructure defense, malware reduction, and critical fault repairs are managed strictly under Recognized Legitimate Interests. This statutory classification removes formal requirement demands for typical subjective balancing assessments, permitting continuous real-time security monitoring of connection streams to protect our digital assets against automated abuse.

3. Subject Access Request (SAR) Procedures & Resolution SLAs

Under UK GDPR, you maintain absolute rights to inspect, modify, export, or erase any personal data records held by Westbrook Laundry. To submit a formal Subject Access Request (SAR):

Direct Compliance Address:

Email our designated Data Privacy Lead at hello@itsmyapp.co.uk with the subject line "Statutory SAR Request — Westbrook Laundry".

Statutory Resolution Limit: We formally acknowledge and fulfill all SAR submissions within a strict 30-day resolution limit. Note that this timeframe may be paused if clarification of identity verification documentation is strictly required.

4. Statutory Escalation Paths to the Information Commissioner

If you believe our data handling practices infringe UK legislative frameworks, you retain full statutory rights to lodge a formal complaint directly with the supervisory authority: