GDPR Compliance

Last updated: 8 July 2026

Our commitment to data protection

bedizricen is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection legislation. This page explains how we comply with these regulations and outlines your rights as a data subject.

Legal basis for processing

We process personal data under the following legal bases:

• Contract performance: Processing necessary to fulfill rental agreements and provide requested services
• Legal obligation: Processing required to comply with legal and regulatory requirements
• Legitimate interests: Processing necessary for business operations, fraud prevention, and service improvement
• Consent: Where explicitly provided for marketing communications or optional services

Data subject rights

Under GDPR, you have the following rights:

Right of access

You may request confirmation of whether we process your personal data and obtain a copy of that data along with supplementary information about the processing.

Right to rectification

You may request correction of inaccurate personal data and completion of incomplete data.

Right to erasure

You may request deletion of your personal data in specific circumstances, subject to legal retention obligations.

Right to restriction of processing

You may request that we limit processing of your personal data in certain situations.

Right to data portability

You may request to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights related to automated decision-making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant impacts.

Data retention

We retain personal data for the following periods:

• Rental booking information: 7 years for legal and accounting purposes
• Driving licence verification records: Duration of business relationship plus 2 years
• Marketing consent records: Until consent is withdrawn or 3 years of inactivity
• Website analytics data: 26 months

International data transfers

Personal data is stored and processed within the United Kingdom. We do not transfer data outside the UK or European Economic Area except where necessary for payment processing, which is conducted under appropriate safeguards.

Data protection officer

For data protection inquiries or to exercise your rights, contact:

bedizricen
47 George Street
Edinburgh EH2 2HT
United Kingdom
Email: [email protected]

Right to lodge a complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk

Data breach notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the ICO within 72 hours of becoming aware of the breach, in accordance with GDPR requirements.