GDPR Policy

Scope

This policy applies where Rig & Reach processes personal data that is subject to the EU General Data Protection Regulation or UK GDPR. It supplements our general Privacy Policy.

Data controller

For website enquiries and direct business communications, Rig & Reach acts as the data controller unless a different arrangement is agreed in writing.

Lawful bases

Depending on the context, we may process personal data because you asked us to take steps before entering a contract, because processing is necessary to perform a contract, because we have a legitimate business interest that does not override your rights, because we must comply with a legal obligation, or because you have provided consent.

Your rights

Where applicable, you may have rights to access, rectify or erase personal data, restrict or object to processing, receive portable data, withdraw consent and lodge a complaint with the relevant supervisory authority.

International transfers

Because Rig & Reach serves clients across multiple countries and uses internet-based service providers, data may be processed outside your country. Where required, appropriate transfer safeguards should be used by the relevant provider or under the applicable contract.

Requests

To make a data-protection request, email marketing@rigandreach.com. We may need to verify your identity before acting on a request.

Website configuration

If analytics, remarketing pixels, advertising cookies or non-essential tracking are enabled on the website, a suitable consent mechanism should be configured for users in jurisdictions where consent is required. The policy should also be updated to identify the specific tools in use.

This GDPR page is a general operational draft, not legal advice. GDPR obligations vary by role, processing activity, location and technology stack.