GDPR
Data rights and legal basis
This page summarises GDPR-related rights and legal context for the Waylight Atlantic website.
For the full processing overview, including cookies and third-party services, see the Privacy Policy.
Controller and scope
Who is responsible for data processing
Data controller: Waylight Atlantic
Location: Bristol, United Kingdom
Privacy contact route: Use the Contact page. A dedicated privacy email is not currently published on this site.
Processing Summary
What is processed and the legal basis used
| Processing activity |
Legal basis |
| Contact enquiry handling (Formspree) |
Legitimate interests and, where applicable, pre-contract steps at your request. |
| Technical website operation and security logs |
Legitimate interests in secure, reliable website operation. |
| Optional pricing preference storage |
Legitimate interests in providing a functional pricing display experience. |
Not currently in use: No analytics platform, advertising pixels, newsletter tooling, embedded map, or embedded video by default.
Data Subject Rights
Your rights under UK GDPR and EU GDPR
Access: Request a copy of personal data held about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion where there is no valid reason to continue processing.
Restriction and objection: Request limits on processing or object where lawful.
Portability: Request transfer of data where this right applies.
To make a rights request, use the Contact page and mark your request as GDPR/privacy related.
Page Summary
GDPR
Rights first
This page focuses on rights, legal basis, and complaint routes for UK/Irish users.
Controller details
Waylight Atlantic operates from Bristol, UK, with requests handled through the Contact page.
Proportionate processing
Processing is limited to enquiries, technical operation, and essential pricing preference storage.
Privacy page link
See the Privacy Policy for full operational detail, including cookies and third-party services.
