299's GDPR Compliance




We are committed to our users’ right to privacy. We promise to share as transparently as possible all aspects of how the 299 Lighting Ltd. website works regarding privacy, terms, and personal data, and we endeavour to ensure your protection online.

The following is a collection of information and resources to help answer any questions you have about your experience with 299 Lighting. We’re grateful for your interest and proud to have you as visitors to our website!


GDPR compliance

The EU’s General Data Protection Regulations (GDPR) takes effect May 25, and we are fully behind the spirit of these regulations. We aspire to embrace privacy by design and, whenever possible, to not collect and store personally-identifiable information.

Our Privacy Policy contains mentions of the few instances where personally-identifiable information is required. Typically, this will include an email address for which to send you documents of interest (pertaining to educational material).

Overall, we aim for privacy by default: if data collection is not integral to the way our product works, then we won’t collect it. This approach has felt very much in line with the spirit of GDPR, and we’re fortunate that a lot of these data collection practices have been in place at 299 Lighting for some time.

You may request your data to be exported and sent to you at any time, we will promptly honour any requests for deletion and to be forgotten (Data will be removed within 72 hours of the request).

Below is our progress in regard to GDPR compliance:


Data Mapping

Status: Completed

We are auditing all areas of 299 Lighting to determine what personal data we collect and for what purpose. In a case where collecting personal data is not essential we are removing permanently removing this information.


Privacy Policy

Status: Completed

We are working to ensure that our policy is easy to understand, and that it indicates any instances of personal data collection.



Status: Approaching Completion

Cookie notice on all pages with a link to our cookie policy page. Classification of individual cookies used to be completed



Status: Complete

All users have the right to request that we delete any of their personal data. Persons who wish to inquire about the right to be forgotten can reach out to us at any time (we will always come back to you within 72 hours of your request).



Access / Portability

Status: Complete

A person can request access to a copy of the personal data that we have collected (we will always come back to you within 72 hours of your request). Users who wish to request portability can reach out to us at any time. Zoho (our CRM provider) can be contacted to ensure all data is sent across (in line with their data handling policy).




Status: Complete

At 299, if a user asks to change their information, we can do so within our CRM. If a user has a modification to make, they can reach out to us at info@299lighting.co.uk (we will always come back to you within 72 hours of your request).


Data Protection Agreement

Status: Started

We are in the process of creating a legal agreement that users and external parties can receive from us. This promises the protection all personally identifiable information that we collect and store.



Our sub-processors (any third party that we share personally identifiable info with, although they do not use the information for their benefit).

Here is a list of sub-processors:

  • Zoho
  • Google
  • Ring Central
  • Office 365


Data Handler 

Status: Completed

We have registered Barnaby Giles as our data handler. Barnaby will be in charge of any queries related to data, you may connect with him on LinkedIn or email him at info@299lighting.co.uk.


Breach Policy 

In the event of a breach of any users' data, we will report the breach within 72 hours but always aim to do so at the earliest convenience. Breaches will be reported to the ICO and we will follow their recommendations for remedying the situation. 


Duration Data Held 

Status: Completed

We have decided that data will be held for the following lengths of time. 2 years for those that we have deemed to have legitimate interest (based upon their interactions with 299) and 3 years for customers and those that have opted-in. 


To learn more about 299 and privacy, please refer to our other relevant pages; Cookie PolicyLegitimate Interest and Privacy Policy.





We use cookies to ensure that we give you the best experience on our website and to tailor the relevance of our communications with you. If you continue to browse our website, we’ll assume that you are happy about this. You can manage the cookie setting at any time. To learn more about how the cookies are used on this website, please read here.