UK GDPR Compliance
This page explains how Oven Love IOW complies with the UK General Data Protection Regulation (UK GDPR), which governs the protection of personal data in the United Kingdom. While we do not collect or store personal information through user registration or databases, we may process limited data through website interactions, analytics, and contact forms. This document outlines your rights and our obligations under UK GDPR.
Scope and Applicability
The UK GDPR applies to the processing of personal data of individuals in the UK. Oven Love IOW is a data controller under UK GDPR for any personal data collected via our website, including contact form submissions, IP addresses, and cookies used for analytics. Our processing activities are limited to facilitating communication and improving website functionality.
Your Rights Under UK GDPR
Under UK GDPR, you have the following rights:
- Right of access – You may request confirmation of whether we hold your personal data and receive a copy of it.
- Right to rectification – You may request correction of inaccurate or incomplete personal data.
- Right to erasure – You may request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restriction of processing – You may request that we limit how your data is used under certain conditions.
- Right to data portability – You may request your data in a structured, commonly used format, where technically feasible.
- Right to object – You may object to processing based on legitimate interests, including profiling or direct marketing.
How We Comply
Oven Love IOW complies with UK GDPR by:
- Only collecting data necessary for communication or website functionality
- Using secure, encrypted contact forms
- Minimising data retention periods
- Not sharing data with third parties unless required by law
- Implementing technical and organisational measures to protect data
Data We Process
We may process the following types of personal data:
- Name and contact details submitted via our contact form
- IP address and browser information collected via analytics cookies (anonymised)
- Time and date of website visits
No sensitive personal data (e.g., health, race, religion) is collected or stored.
Legal Basis for Processing
We process personal data based on the following lawful bases under UK GDPR:
- Consent – For cookies and analytics, where applicable and opt-in
- Legitimate interest – To respond to inquiries, improve website performance, and ensure security
- Contractual necessity – To fulfil requests made via our contact form
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us via email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., email used to contact us). We will respond without undue delay.
Response Timeframes
We aim to respond to all requests within one calendar month. In complex cases, we may extend this period by two additional months and will inform you if this is necessary.
No Discrimination Policy
You will not be denied services, charged different prices, or receive a lower quality of service for exercising your rights under UK GDPR.
Updates and Changes
We may update this page periodically to reflect changes in law or our practices. The most recent version will always be posted here with an updated effective date.
Contact Information
If you have questions about this compliance page or wish to exercise your rights, please contact:
Ezra Bucknell
57 Abinger Road, Portslade, Brighton, BN41 1SD, United Kingdom
[email protected]
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection: ico.org.uk.
