Your GDPR Rights

Last updated: March 2026 · Applies to UK residents under the UK GDPR

The Vaya Display is operated by Chris Ambrose, a UK-based individual. When you place a reservation, I collect and store personal data including your name, email address, phone number, and delivery address. Under UK GDPR (the UK General Data Protection Regulation), you have a number of rights regarding this data.

Your rights at a glance

📋 Right of Access

You can request a copy of all personal data I hold about you (a "Subject Access Request").

✏️ Right to Rectification

If any of your information is inaccurate or incomplete, you can ask me to correct it.

🗑️ Right to Erasure

You can request deletion of your personal data. If your order has not yet proceeded to deposit, I will cancel and delete your reservation on request.

⏸️ Right to Restriction

You can ask me to pause processing of your data — for example, while a complaint is being resolved.

📦 Right to Portability

You can request your data in a structured, machine-readable format (e.g. CSV or JSON).

🚫 Right to Object

You can object to the processing of your data where it is based on legitimate interests, rather than a contract.

Legal basis for processing your data

I process your personal data on the following legal bases under UK GDPR:

Article 6(1)(b) – Contract performance: your name, email, phone number, and delivery address are necessary to manage your reservation and fulfil your order.
Article 6(1)(f) – Legitimate interests: sending transactional emails (e.g. order confirmations and status updates), and preventing fraudulent or duplicate reservations.

Data retention

Your reservation data is retained for as long as needed to complete the order and meet legal obligations. If your reservation is cancelled before a deposit is requested, your personal data will be deleted within 30 days of cancellation. Financial records relating to completed transactions may be retained for up to 7 years in line with HMRC requirements.

International transfers

Your data is stored on UK or EU-based servers. No personal data is transferred to countries outside the UK/EEA without appropriate safeguards in place.

Automated decision-making

Your reservation is not subject to any automated decision-making or profiling. Batch assignment is carried out programmatically but does not affect your rights.

How to exercise your rights

To make a request under any of the rights above, please email me at:

hello@vayasystems.com

Please include your name and the email address associated with your reservation so I can locate your data. I will respond within 30 days.

If you are not satisfied with my response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).