GDPR Compliance

Introduction

Stellar Bot is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains your rights and how we comply with data protection laws.

Data Controller

Stellar Bot is the data controller responsible for your personal information. Our contact details are:

Your Rights Under UK GDPR

1. Right to Be Informed

You have the right to be informed about the collection and use of your personal data. We provide this information through our Privacy Policy and at the point of data collection.

2. Right of Access

You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.

3. Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.

4. Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data where:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Erasure is required for compliance with a legal obligation

5. Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

7. Right to Object

You have the right to object to:

• Processing based on legitimate interests
• Direct marketing (including profiling)
• Processing for scientific or historical research purposes

8. Rights Related to Automated Decision Making and Profiling

We do not currently engage in automated decision-making or profiling. Should this change, you will have the right not to be subject to decisions based solely on automated processing.

How to Exercise Your Rights

To exercise any of these rights, please contact us:

• Email: [email protected]
• Post: Stellar Bot, 42 Culinary Lane, Peckham, London SE15 4RN, United Kingdom

We will respond to your request within one month. In complex cases, we may extend this by a further two months, and we will inform you if this is necessary.

Verifying Your Identity

To protect your privacy, we may need to verify your identity before responding to your request. We may ask for additional information to confirm you are the person about whom we hold data.

No Fee Usually Required

You will not normally have to pay a fee to exercise your rights. However, we may charge a reasonable fee or refuse to comply with your request if it is clearly unfounded, repetitive, or excessive.

Right to Lodge a Complaint

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Data Protection Principles

We process personal data in accordance with the following principles:

• Lawfulness, fairness and transparency: We process data lawfully, fairly, and in a transparent manner
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes
• Data minimisation: We collect only what is necessary for the intended purpose
• Accuracy: We keep personal data accurate and up to date
• Storage limitation: We retain data only as long as necessary
• Integrity and confidentiality: We process data securely
• Accountability: We are responsible for demonstrating compliance

International Data Transfers

We primarily store and process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ICO within 72 hours of becoming aware of the breach.

Updates to This Information

We may update this GDPR information from time to time. Please check this page periodically for changes. This page was last updated on 22 May 2026.

Contact Us

If you have any questions about your data protection rights or our GDPR compliance, please contact us at [email protected].