UK GDPR

Eldon Quigley

UK GDPR Compliance

At JR Wax & Tune Clothing Specialists, we are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights under UK GDPR, even though we do not store personal data through user registration or databases.

Scope and Applicability

The UK GDPR applies to the processing of personal data of individuals in the United Kingdom. While our website is informational and does not require registration, we may collect limited personal data automatically through cookies, web analytics, and server logs for operational and security purposes. This page outlines how we handle such data in compliance with UK GDPR.

Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access – You can request confirmation of whether we process any of your personal data.
  • Right to rectification – You may request correction of inaccurate or incomplete data.
  • Right to erasure – You may request deletion of your personal data where applicable.
  • Right to restrict processing – You may request limitation of how your data is used.
  • Right to data portability – You may request a copy of your data in a structured, machine-readable format.
  • Right to object – You may object to processing based on legitimate interests, including profiling or analytics.
  • Right to withdraw consent – Where consent is the legal basis, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.

How We Comply

Our website does not store personal data in databases, collect personally identifiable information through forms, or require user accounts. Any personal data collected is limited to:

  • IP addresses (anonymised where possible)
  • Cookies for site functionality and analytics
  • Server logs for security and performance

We use cookie consent banners to obtain valid consent for non-essential tracking. We do not sell or share personal data with third parties for advertising purposes. All data processing is conducted with legitimate interest as the legal basis, and we conduct regular data protection impact assessments.

Data We Process

The personal data we may process includes:

  • IP address (used for geo-location and security)
  • Browser type and device information
  • Pages visited and time spent on site
  • Cookies and similar technologies for analytics

This data is not linked to your identity and is retained only for as long as necessary for operational purposes, typically no more than 12 months.

Legal Basis for Processing

We rely on legitimate interest as the legal basis for processing personal data, as defined under UK GDPR Article 6(1)(f). This includes:

  • Ensuring website security and integrity
  • Improving user experience through analytics
  • Maintaining system performance and uptime

We balance our legitimate interests against your rights and freedoms, and we do not process data where your interests override ours.

How to Exercise Your Rights

To exercise any of your UK GDPR rights, please contact us by email at [email protected]. In your message, please include:

  1. Your full name
  2. Details of the right you wish to exercise
  3. Any relevant information to help us locate your data (e.g., IP address or cookie ID if known)

We will respond without undue delay and within one month of receipt of your request.

Response Timeframes

We are required by UK GDPR to respond to your request within one month. In complex cases, we may extend this period by up to two additional months, and we will inform you of any delay and the reasons for it.

No Discrimination Policy

We will never deny you access to our website, charge you fees, or provide you with a lower quality of service because you have exercised your rights under UK GDPR.

Updates and Changes

We may update this page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date. We encourage you to review this page regularly.

Contact Information

If you have any questions about our UK GDPR compliance or wish to exercise your rights, please contact our data protection point of contact:

Eldon Quigley
91 Manners Street, Te Aro, Wellington 6011, New Zealand
[email protected]

Last Updated: 2024-06-15