GDPR Information
Last Updated: September 1, 2026
Our Commitment to Data Protection
moon-cougar is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws. This page explains how we comply with these regulations and what rights you have regarding your personal information.
Data Controller
For the purposes of data protection legislation, moon-cougar acts as the data controller for personal information collected through our website and service operations.
Contact details:
moon-cougar
47 Marlborough Street
Edinburgh EH3 8PD
United Kingdom
Email: info@moon-cougar.com
Lawful Basis for Processing
We process personal data only when we have a lawful basis to do so:
- Consent: When you voluntarily provide information through service request forms
- Contractual Necessity: To perform services you have engaged us to provide
- Legitimate Interests: To maintain our business operations, respond to inquiries, and improve our services
- Legal Obligation: When required to comply with applicable laws and regulations
Personal Data We Collect
We collect only the personal data necessary to provide our services:
- Identification information: name, email address
- Project-related information: details about archival materials and research requirements
- Communication records: correspondence regarding services and projects
- Technical data: IP addresses, browser information, and site usage patterns
Your Rights Under GDPR
You have comprehensive rights regarding your personal data:
Right to Access
You can request confirmation of whether we process your personal data and obtain a copy of that data along with supplementary information about how we use it.
Right to Rectification
You can request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
You can request deletion of your personal data under certain circumstances, including when data is no longer necessary for the purposes it was collected or when you withdraw consent.
Right to Restriction of Processing
You can request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.
Right to Data Portability
You can request that we provide your personal data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.
Right to Object
You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
We do not engage in automated decision-making or profiling activities that produce legal effects or similarly significant impacts.
How to Exercise Your Rights
To exercise any of your data protection rights, please contact us at info@moon-cougar.com with:
- Clear identification of which right you wish to exercise
- Sufficient information to verify your identity
- Specific details about the data or processing activity in question
We will respond to your request within one month, though this may be extended by two additional months for complex requests. We will inform you of any extension and the reasons for it.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Service inquiry data: retained for the duration of project discussions and up to 12 months after final correspondence
- Client project data: retained for the duration of the project and up to 7 years afterward for legal and professional standards compliance
- Technical website data: typically retained for 12 months
Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction:
- Secure data storage with encryption where appropriate
- Access controls limiting data access to authorized personnel only
- Regular security assessments and updates
- Confidentiality obligations for all staff handling personal data
International Data Transfers
We primarily store and process data within the United Kingdom. If we transfer personal data outside the UK or European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
Data Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform you directly without undue delay.
Third-Party Processing
We may engage third-party service providers to process personal data on our behalf. All such processors are selected carefully and bound by contractual obligations to implement appropriate security measures and process data only as instructed.
Children's Data
Our services are not directed at children under 18. We do not knowingly collect or process personal data of minors. If we become aware of such collection, we will delete the information immediately.
Complaints
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority:
UK: Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Updates to This Information
We may update this GDPR information to reflect changes in our practices or legal requirements. Material changes will be communicated through our website with an updated effective date.
Contact for Data Protection Matters
For questions about our data protection practices or to exercise your GDPR rights:
Email: info@moon-cougar.com
Post: moon-cougar, 47 Marlborough Street, Edinburgh EH3 8PD, United Kingdom