GDPR Compliance

Last updated: July 6, 2026

General Data Protection Regulation

altogmalvi processes personal data in accordance with the General Data Protection Regulation and UK data protection legislation. This document outlines your rights and our obligations under these regulations.

Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract performance: to fulfill rental service agreements
  • Legitimate interests: to operate our business and improve services
  • Legal obligations: to comply with UK business record requirements
  • Consent: for marketing communications where applicable

Data Subject Rights

Under GDPR, you have the following rights:

  • Right of access: obtain confirmation of data processing and access to your personal data
  • Right to rectification: correct inaccurate or incomplete personal information
  • Right to erasure: request deletion of your data under certain circumstances
  • Right to restrict processing: limit how we use your data in specific situations
  • Right to data portability: receive your data in a structured, commonly used format
  • Right to object: oppose processing based on legitimate interests or direct marketing

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month of receipt. In complex cases, this period may be extended by two additional months with appropriate notification.

Data Protection Officer

For questions regarding data protection practices or to lodge a complaint about data handling, you may contact our operations team at [email protected].

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters, if you believe your data rights have been violated.

Data Transfers

Personal data is stored and processed within the United Kingdom. We do not transfer data outside the UK or European Economic Area without appropriate safeguards in place.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or significantly affects you without human review.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals within 72 hours of becoming aware of the breach, in accordance with GDPR requirements.