04. LEGAL BASIS FOR PROCESSING

Under UK GDPR and EU GDPR, we process your personal data based on:

Consent: When you have given explicit consent (e.g., marketing communications)

Contract: When processing is necessary to perform a contract with you

Legitimate Interests: When we have a legitimate business interest (e.g., improving services, fraud prevention)

Legal Obligation: When we must comply with legal requirements