GDPR Compliance Statement
Last updated: August 13, 2026
Our Commitment to GDPR
onereabbes is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This statement outlines how we comply with GDPR requirements.
Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Consent: When you provide explicit consent for us to process your data for specific purposes
- Contract: When processing is necessary to fulfil our contractual obligations to you
- Legitimate Interests: When we have a legitimate business interest that does not override your rights
- Legal Obligation: When we must process your data to comply with legal requirements
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format.
Right to Rectification
You can request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You can request that we restrict the processing of your personal data in specific situations, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You can object to the processing of your personal data in certain circumstances, particularly for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
Data Protection Officer
For any questions regarding data protection or to exercise your GDPR rights, please contact us at hello at onereabbes.com.
Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.
International Data Transfers
Your personal data is processed within the United Kingdom. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
Children's Privacy
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children without verifiable parental consent.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us at hello at onereabbes.com. We will respond to your request within one month, though this may be extended by two additional months if your request is complex.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.