GDPR Compliance

Last Updated: November 3, 2026

General Data Protection Regulation

Noble Aurora is committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Economic Area (EEA) and the United Kingdom.

Data Controller

Noble Aurora acts as the data controller for personal information collected through our website and business operations.

Noble Aurora
42 Broadcasting Lane
Hammersmith
London W6 9TA
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you voluntarily provide information through contact forms
• Contractual Necessity: To fulfill services you've engaged us for
• Legitimate Interests: To respond to inquiries and improve our services
• Legal Obligation: To comply with applicable laws and regulations

Your Rights Under GDPR

Right to Access

You have the right to request access to the personal data we hold about you. We will provide a copy of this data in a commonly used electronic format.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion.

Right to Erasure

You may request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and no other legal basis exists
• You object to processing and no overriding legitimate grounds exist
• The data has been unlawfully processed

Right to Restriction of Processing

You can request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended by two additional months for complex requests.

We may need to verify your identity before processing your request. We will not charge a fee unless your request is manifestly unfounded or excessive.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy or as required by law. Retention periods vary based on:

• The nature of the data collected
• The purpose for which it was collected
• Legal and regulatory requirements

International Data Transfers

Your personal data is primarily processed within the United Kingdom. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Binding corporate rules

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach.

Children's Data

Our services are not directed to children under 16. We do not knowingly collect or process personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. In the UK, the supervisory authority is:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We will notify you of material changes through our website or by email.

Contact Information

For questions about GDPR compliance or to exercise your rights, contact our Data Protection Officer:

Email: [email protected]
Address: Noble Aurora, 42 Broadcasting Lane, Hammersmith, London W6 9TA, United Kingdom