# Restriction of Processing Confirmation Letter **CONFIDENTIAL** --- **From:** Meridian Analytics Ltd Data Protection Office 47 Canary Wharf Tower, London E14 5AB dpo@meridiananalytics.co.uk **Date:** 14 March 2026 **To:** Priya Sharma 25 St James's Square London SW1Y 4JU **Reference:** RST-2026-0228 **Subject:** Confirmation of Restriction of Processing of Your Personal Data --- Dear Ms Sharma, Thank you for your request received on 28 February 2026 to restrict the processing of your personal data. We have assessed your request in accordance with Article 18 of the UK General Data Protection Regulation (UK GDPR). ## 1. Assessment Outcome We confirm that the ground for restriction under **Article 18(1)(a)** applies — you have contested the accuracy of specific personal data we hold about you, and we are in the process of verifying its accuracy. Specifically, you have disputed the accuracy of the following data: - Job title recorded as "Senior Analyst" (you state the correct title is "Director of Analytics") - Employer recorded as "Clearview Consulting Ltd" (you state the correct employer is "Clearview Advisory LLP") ## 2. Restriction Measures Applied We have applied the following restriction measures effective 03 March 2026: | Measure | Description | Status | |---------|-------------|--------| | Database restriction flag | All records associated with your account have been flagged as restricted | Applied | | Application query exclusion | Your data is excluded from all standard processing operations, reporting, and analytics | Applied | | API access control | Any API requests returning your data will receive a restricted-data response | Applied | | Internal UI masking | Your records display a "RESTRICTED" indicator in all internal tools | Applied | | Access restriction | Access to your data is limited to the Data Protection Office and Legal team | Applied | ## 3. Processing During Restriction While the restriction is in effect, your personal data will only be processed: - With your specific consent for a particular processing activity - For the establishment, exercise, or defence of legal claims - For the protection of the rights of another person - For reasons of important public interest Your data will continue to be stored securely but will not be used for any other purpose. ## 4. Third-Party Notifications We have notified the following recipients of the restriction on processing your personal data, in accordance with Article 19: | Recipient | Notification Date | Confirmed | |-----------|-------------------|-----------| | Amazon Web Services EMEA SARL | 04 March 2026 | 06 March 2026 | | Stripe Payments Europe Ltd | 04 March 2026 | 05 March 2026 | ## 5. Verification and Next Steps We are currently verifying the accuracy of the contested data. We expect to complete this verification by **18 March 2026**. Once verification is complete: - If the data is found to be inaccurate, we will rectify it under Article 16 and notify you of the correction. - Before lifting the restriction, we will notify you at least 7 days in advance, in accordance with Article 18(3). ## 6. Your Rights You have the right to: - Request erasure of your data under Article 17 - Lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113 - Seek a judicial remedy under Article 79 If you have questions, please contact our Data Protection Officer at dpo@meridiananalytics.co.uk. Yours sincerely, **Dr Sarah Chen** Data Protection Officer Meridian Analytics Ltd