Your data protection rights under the General Data Protection Regulation.
root-muse is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle your personal data and your rights under these regulations.
root-muse is the data controller for personal information collected through this website and our services. This means we determine how and why your personal data is processed.
Contact details:
root-muse
47 Cathedral Road
Cardiff, CF11 9HB
United Kingdom
[email protected]
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request, free of charge in most circumstances.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to such requests within one month.
Also known as the "right to be forgotten", you may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose or when you withdraw consent.
You have the right to request that we limit how we use your personal data in certain situations, such as while we verify accuracy or consider an objection you have raised.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
To exercise any of these rights, please contact us at [email protected] with your request. We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests, in which case we will inform you.
We process personal data only when we have a lawful basis to do so:
We primarily store and process data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place to protect your information.
In the event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay and inform the Information Commissioner's Office within 72 hours where required.
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow, Cheshire
SK9 5AF
Website: ico.org.uk
Last updated: October 2026