GDPR Information

Last Updated: September 2026

Our Commitment to Data Protection

Ember-quartz is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page provides specific information about how we comply with your data protection rights.

Data Controller Information

Ember-quartz acts as the data controller for personal data collected through this website and our services. Our contact details are:

Ember-quartz
42 Deansgate Avenue
Manchester M3 2FF
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process your personal data only when we have a lawful basis to do so:

• Consent: When you voluntarily provide information through our website forms or accept cookies
• Legitimate Interests: To operate our business, improve our services, and communicate about payment solutions you have expressed interest in
• Contract: To fulfill service agreements and deliver requested services
• Legal Obligation: To comply with applicable laws and regulatory requirements in the financial services sector

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Be Informed

You have the right to clear information about how we collect and use your personal data. This information is provided in our Privacy Policy and on this page.

Right of Access

You can request a copy of the personal data we hold about you. We will provide this information within one month of your request, free of charge in most cases.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected.

Right to Erasure

You can request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.

Right to Restrict Processing

You can request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You can object to processing of your personal data that is based on our legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you. We do not currently use automated decision-making processes that would trigger this right.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. Please include:

• Your full name and contact information
• A clear description of which right you wish to exercise
• Any relevant details about the specific data or processing you are concerned about

We will respond to your request within one month. In some cases, this period may be extended by two additional months where necessary, taking into account the complexity of your request.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Our standard retention periods are:

• Website inquiry data: Three years from last contact
• Client service data: Seven years after service termination (to comply with financial record-keeping requirements)
• Marketing consent data: Until consent is withdrawn

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls limiting who can view personal data
• Staff training on data protection principles
• Incident response procedures for data breaches

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, as required by GDPR.

International Data Transfers

Your personal data is primarily processed within the United Kingdom. If we transfer data to countries outside the UK, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the UK authorities
• Transfers to countries with adequacy decisions
• Binding corporate rules where applicable

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: www.ico.org.uk

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. The date at the top of this page shows when it was last updated.