GDPR Compliance & Data Protection

Last updated: August 2026

1. Our Commitment to Data Protection

rangoscamp is committed to protecting personal data in accordance with UK GDPR (General Data Protection Regulation) and the Data Protection Act 2018. This document outlines how we comply with data protection legislation and the rights available to data subjects.

2. Data Controller Information

rangoscamp acts as the data controller for personal information collected through this website and in the course of providing consulting services.

Contact details:
rangoscamp
42 Hatton Garden
Liverpool L3 2FE
United Kingdom
Email: [email protected]

3. Types of Personal Data Processed

We process the following categories of personal data:

• Identity data: Name, title, position
• Contact data: Email address, postal address, organisation name
• Technical data: IP address, browser type, operating system, access times
• Usage data: Information about how you use our website and services
• Project data: Information related to energy consulting engagements

4. Lawful Basis for Processing

We process personal data only where we have a lawful basis to do so:

• Consent: Where you have provided explicit consent for processing
• Contract performance: Where processing is necessary for service delivery
• Legitimate interests: For business operations, security, and service improvement
• Legal obligation: Where required by law

5. Your Rights Under GDPR

You have the following rights regarding your personal data:

5.1 Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

5.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

5.3 Right to Erasure

You can request deletion of your personal data where there is no compelling reason for continued processing.

5.4 Right to Restrict Processing

You can request limitation of processing in certain circumstances.

5.5 Right to Data Portability

You can request transfer of your data in a structured, machine-readable format.

5.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

5.7 Rights Related to Automated Decision Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

6. How to Exercise Your Rights

To exercise any of the rights listed above, contact us at [email protected] with your request. We will respond within one month of receiving your request, or inform you if an extension is required.

When submitting a request, please provide:

• Your full name and contact details
• Description of the specific right you wish to exercise
• Any relevant details to help us locate your data

7. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected. Retention periods vary depending on the type of data and legal requirements:

• Enquiry data: 2 years from last contact
• Client project data: 7 years from project completion (professional standards requirement)
• Marketing consent records: Until consent is withdrawn
• Technical logs: 12 months maximum

8. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments
• Staff training on data protection
• Incident response procedures

9. Data Breach Notification

In the event of a personal data breach that poses a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Affected individuals will be notified where the breach poses a high risk to their rights.

10. Third-Party Data Sharing

We do not sell or rent personal data to third parties. Data may be shared with:

• Service providers who process data on our behalf under contractual obligations
• Professional advisors bound by confidentiality obligations
• Law enforcement or regulatory bodies where legally required

11. International Data Transfers

Personal data is primarily stored and processed within the United Kingdom. Where transfers outside the UK are necessary, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

12. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk

13. Updates to This Notice

This GDPR notice may be updated periodically to reflect changes in our data processing practices or legal requirements. The "last updated" date at the top of this page indicates when changes were last made.