GDPR Policy
Last updated: 8 May 2026
This page summarises the rights you have under the UK GDPR and the EU GDPR (where applicable) and the steps Westbridge Limited takes to respect them. It is designed to be read alongside our Privacy Policy.
1. Our commitment
We process personal data lawfully, fairly and transparently. We collect only what we need, keep it only for as long as we need it, and apply appropriate technical and organisational safeguards. We treat data protection as part of how we build and run our services, not as a compliance afterthought.
2. Data controller
Westbridge Limited is the controller for personal data processed through our website and services. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Privacy contact: legal@westbridgelimited.xyz.
3. Your rights
You have eight rights under UK GDPR. Each is described below along with a short note on what it means in practice.
3.1 The right to be informed
You have the right to know who collects your data, why, who we share it with, and how long we keep it. Our Privacy Policy covers this.
3.2 The right of access
You can ask for a copy of the personal data we hold about you and the information required by Article 15 (purposes, recipients, retention, etc.). This is known as a Subject Access Request (SAR).
3.3 The right to rectification
You can ask us to correct inaccurate or incomplete personal data. Most details (name, email, password) you can update directly in your account at /account; for anything else email us.
3.4 The right to erasure
Also known as the "right to be forgotten". You can ask us to delete personal data when it is no longer needed, you withdraw consent, or you object and we have no overriding legitimate ground. Some data we must keep to comply with legal obligations (for example, financial records under HMRC rules - see Privacy Policy section 7).
3.5 The right to restrict processing
You can ask us to limit how we use your data while a complaint or rectification request is being resolved.
3.6 The right to data portability
For data you provided based on consent or contract and which we process by automated means, you can ask us to deliver it in a structured, commonly used, machine-readable format (we use JSON or CSV).
3.7 The right to object
You can object to processing based on our legitimate interests (including profiling). We will stop unless we have a compelling legitimate ground that overrides your interests, or we need to process for legal claims.
3.8 Rights related to automated decision-making
We do not make decisions about you using fully automated systems that produce legal or significant effects. If that ever changes we will update this policy and offer the safeguards required by Article 22.
4. How to exercise your rights
Email legal@westbridgelimited.xyz with the subject line "GDPR request" and tell us:
- Which right you want to exercise (or describe what you want to do).
- The email address associated with your Westbridge account, if any.
- Any context that helps us locate the relevant data.
5. Identity verification
To protect your data we may need to verify your identity before responding. We will ask you to confirm details only the account holder would know (e.g. send the request from the registered email address) rather than collecting more data than necessary.
6. Response time
We respond to GDPR requests within one month, in line with Article 12(3). If your request is complex or you have submitted multiple requests, we may extend this by a further two months and will tell you why.
7. Cost
Exercising your rights is free of charge. We may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive (for example, repetitive); we will explain our reasoning if we do so.
8. Complaints
If you are unhappy with how we handle your personal data or your request, you can complain to the UK Information Commissioner's Office:
- Website: ico.org.uk
- Phone: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Where applicable, you may also complain to the data protection authority in your EU member state.
9. Changes
We may update this policy as our processes or applicable law evolve. The "Last updated" date at the top reflects the latest version.
10. Contact
For all GDPR-related enquiries: legal@westbridgelimited.xyz.