Last Updated: August 4, 2026
snow-roam is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For the purposes of data protection legislation, snow-roam acts as the data controller for personal information collected through our website and services.
Contact for data protection matters: [email protected]
We process personal data only when we have a lawful basis:
When you submit forms or provide information voluntarily, you give explicit consent for us to process that data for the stated purposes.
Processing is necessary to perform services you have requested or contracted.
We may process data based on legitimate business interests, such as improving services, preventing fraud, or maintaining security, provided these interests do not override your rights.
We process data when required to comply with legal obligations under UK law.
You can request confirmation of whether we process your personal data and obtain a copy of that data.
You can request correction of inaccurate or incomplete personal data.
You can request deletion of your personal data in certain circumstances, including when data is no longer necessary for its original purpose.
You can request that we limit how we use your personal data in specific situations.
You can request your personal data in a structured, commonly used, machine-readable format and have it transferred to another controller.
You can object to processing based on legitimate interests or for direct marketing purposes.
Where processing is based on consent, you can withdraw that consent at any time.
You have the right not to be subject to decisions based solely on automated processing that produces legal effects or similarly significant effects. We do not currently engage in such automated decision-making.
To exercise any of these rights, contact us using the email address provided on our contact page. We will respond to your request within one month, though this period may be extended by two additional months for complex requests.
We may request additional information to verify your identity before processing requests.
Your personal data is processed and stored within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place as required by data protection law.
We implement technical and organizational security measures appropriate to the risk, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by law.
Our services are not intended for children under 18. We do not knowingly collect or process personal data from children.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Specific retention periods are detailed in our Privacy Policy.
When we engage third-party service providers who process personal data on our behalf, we ensure they provide appropriate data protection guarantees through contracts that meet GDPR requirements.
If you believe we have not complied with data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date.