UK GDPR Compliance
Blossom with Vanity Rose is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how your personal data is handled under this law, your rights, and how to exercise them.
Scope and Applicability
This website is an informational blog and does not require user registration, account creation, or direct collection of personal data through forms. However, we may collect limited personal data automatically through website analytics, cookies, and server logs. The UK GDPR applies to this data when it can identify an individual, directly or indirectly.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights:
- Right of access: You may request confirmation of whether we process your personal data and obtain a copy of it.
- Right to rectification: You may request correction of inaccurate or incomplete personal data.
- Right to erasure: You may request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restriction of processing: You may request we limit how we use your data under certain conditions.
- Right to data portability: You may request your data in a structured, commonly used, and machine-readable format.
- Right to object: You may object to processing based on legitimate interests, including profiling or analytics.
- Right to withdraw consent: If we rely on your consent, you may withdraw it at any time.
How We Comply
We do not store personal data in databases or user profiles. Any data collected via cookies or analytics tools is aggregated and anonymised where possible. We use only essential and performance cookies, and all third-party tools (e.g., Google Analytics) are configured to comply with UK GDPR standards. We maintain records of data processing activities and conduct regular reviews to ensure compliance.
Data We Process
The personal data we may process includes:
- IP addresses (anonymised where possible)
- Cookie identifiers
- Browser and device information
- Usage patterns (pages visited, time spent)
This data is collected solely for website functionality, security, and analytics. No sensitive data (e.g., health, race, religion) is collected.
Legal Basis for Processing
We rely on the following legal bases under UK GDPR:
- Legitimate interests: For website analytics and improving user experience.
- Consent: For non-essential cookies, which you may manage via our cookie banner.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us by email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., email address used on the site). We will respond without undue delay.
Response Timeframes
We will respond to your request within one month of receipt. If your request is complex or numerous, we may extend this period by two further months and will inform you within one month of the reasons for the delay.
No Discrimination Policy
You will not be denied access to our content, charged fees, or treated unfairly for exercising your rights under UK GDPR. We do not penalise users for making data protection requests.
Updates and Changes
We may update this page periodically to reflect changes in law or our practices. The most recent version will always be posted here with an effective date. We recommend reviewing this page regularly.
Contact Information
If you have questions about this compliance page or wish to exercise your rights, please contact our data protection point of contact:
Cressida Langston
Osier Way, Shoreham-by-Sea BN43 5DJ
United Kingdom
Email: [email protected]
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection: ico.org.uk.