GDPR Compliance

Milkwood Publishing Ltd, trading as Whistlefish, is committed to protecting your personal information and handling it in accordance with applicable UK data protection law.

This page explains your data protection rights and the options available to help you exercise them. For full details about how we collect, use, share and protect your personal information, please see our Privacy Policy. For information about cookies and your cookie choices, please see our Cookie Policy.

The tools below provide a convenient way to make certain requests, but you do not have to use them. You can also exercise your data protection rights verbally or in writing by contacting us at info@whistlefish.com or through our Contact page.

We may need to ask for information to confirm your identity before acting on a request where this is reasonably necessary. We will respond to valid rights requests without undue delay and normally within one month, subject to any extensions or exemptions permitted by law.

Right to Rectification

You have the right to ask us to correct personal information that is inaccurate or complete information that is incomplete. You can use the link below to request an update to your account information.

Right to Data Portability

In certain circumstances, you have the right to receive personal information you have provided to us in a structured, commonly used and machine-readable format, or to ask us to transfer it to another organisation where technically feasible.

The links below allow you to download certain information associated with your account. The legal right to data portability does not apply to every type of personal information we hold.

Right of Access

You have the right to ask whether we are processing your personal information and to request a copy of the personal information we hold about you. You can use the link below to request a personal data report.

Right to Erasure

You have the right to ask us to delete your personal information in certain circumstances. This right is not absolute, and we may need to retain some information where we have a legal obligation or another lawful reason to keep it, including for accounting, tax, fraud prevention or the establishment, exercise or defence of legal claims.

If your request includes deletion of your Whistlefish customer account, you will no longer be able to access that account once it has been deleted.

Other Data Protection Rights

Depending on the circumstances, you may also have the following rights:

  • Right to restriction – you can ask us to restrict how we use your personal information in certain circumstances.
  • Right to object – you can object to certain uses of your personal information. You have an absolute right to object to your personal information being used for direct marketing.
  • Right to withdraw consent – where we rely on your consent to process personal information, you can withdraw that consent at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn.
  • Rights relating to automated decision-making – where we make a significant decision about you solely using automated processing, applicable law may give you safeguards including the right to receive information about the decision, make representations, obtain human intervention and contest the decision.

These rights do not apply in every circumstance and may be subject to exemptions under applicable data protection law. To exercise any of these rights, please contact us at info@whistlefish.com or through our Contact page.

Data Protection Complaints

If you are concerned about how we have collected, used, stored or otherwise handled your personal information, you have the right to make a data protection complaint to us.

You can make a complaint by contacting us at info@whistlefish.com or through our Contact page. Please include enough information for us to understand and investigate your complaint.

We will acknowledge receipt of a data protection complaint within 30 days. We will investigate the complaint without undue delay, keep you informed as appropriate and let you know the outcome of our investigation.