Solentra House ("Solentra House") processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and Regulation (EU) 2016/679 (EU GDPR). This page summarises our compliance position and how you can exercise your rights. For the full description of what data we collect, why, how long we keep it, and which processors are involved, see the Privacy Policy.
1. Controller
Solentra House, company number 17289559 (United Kingdom (England and Wales)), registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Privacy contact: legal@solentrahouse.xyz.
2. Lawful bases at a glance
| Processing activity | Lawful basis |
|---|---|
| Responding to enquiries and delivering services | Contract (Art. 6(1)(b)) |
| Account creation and management | Contract (Art. 6(1)(b)) |
| Payment processing and accounting records | Contract + Legal obligation (Art. 6(1)(b), (c)) |
| Transactional email (welcome, password reset, receipts) | Contract (Art. 6(1)(b)) |
| Analytics and product improvement | Consent (Art. 6(1)(a)) |
| Captcha, rate limiting, security logs | Legitimate interest (Art. 6(1)(f)) |
| Sanctions and AML screening | Legal obligation (Art. 6(1)(c)) |
3. Your rights
- The right of access to your personal data.
- The right to rectification of inaccurate or incomplete data.
- The right to erasure, subject to statutory retention.
- The right to restriction of processing in defined circumstances.
- The right to data portability in a structured, machine-readable format.
- The right to object to processing based on legitimate interest or for direct marketing.
- The right to withdraw consent at any time where processing is based on consent.
- The right not to be subject to a decision based solely on automated processing that produces legal effects (we do not carry out such processing).
4. How to submit a request
Email legal@solentrahouse.xyz with a description of your request and the email address you used with us. We respond within 30 calendar days. We may extend by up to a further 60 days for complex requests and will tell you within the first 30 days if we do. We may ask for proof of identity before acting on the request, strictly to protect your data.
5. Personal data breach
Where a breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it (Art. 33). Where the risk is high, we will also notify affected data subjects without undue delay (Art. 34).
6. International transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, the European Commission Standard Contractual Clauses (2021/914), or the EU-US Data Privacy Framework where the recipient is certified. The list of our processors and their locations is in the Privacy Policy.
7. Supervisory authorities
If you are based in the United Kingdom, you may lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk.
If you are based in the European Economic Area, you may lodge a complaint with the supervisory authority in your country of residence. National authorities are listed by the European Data Protection Board at edpb.europa.eu/about-edpb/about-edpb/members_en.
8. Further information
Full processing detail, retention periods, processor list, and security measures are in the Privacy Policy. Cookie-related processing is described in the Cookie Policy.