GDPR Compliance Statement

Last updated: August 14, 2026

Our Commitment to Data Protection

Arc Blossom is committed to complying with the General Data Protection Regulation and the Data Protection Act 2018. We recognize the importance of protecting your personal information and ensuring transparency in how we process your data.

Data Controller

Arc Blossom acts as the data controller for personal information collected through our website and in the course of providing legal services. We determine the purposes and means of processing your personal data.

Lawful Basis for Processing

We process personal data only where we have a lawful basis to do so:

• Performance of a contract: Processing is necessary to fulfill our service agreement with you
• Legal obligation: Processing is required to comply with legal or regulatory requirements
• Legitimate interests: Processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
• Consent: You have given clear consent for us to process your personal data for a specific purpose

Special Category Data

In the course of providing benefit claim assistance, we may process special category data including information about your health, disability status, or financial circumstances. We process this data only where:

• You have given explicit consent
• Processing is necessary for the establishment, exercise, or defense of legal claims
• Processing is necessary for reasons of substantial public interest

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access

You have the right to obtain confirmation that we are processing your data and to receive a copy of your personal information.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

In certain circumstances, you have the right to request deletion of your personal data. This right is not absolute and may be limited by our legal obligations to retain records.

Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in certain situations.

Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling in our services.

How to Exercise Your Rights

To exercise any of your rights under GDPR, please contact us using the email address provided on our contact page. We will respond to your request within one month.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office within 72 hours of becoming aware of the breach.

International Data Transfers

We do not transfer personal data outside the United Kingdom or European Economic Area. If this changes, we will ensure appropriate safeguards are in place.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: ico.org.uk

Contact Information

For questions about our GDPR compliance or to exercise your data protection rights, please contact us using the details on our contact page.