UK GDPR

Oct, 16 2024

UK GDPR Compliance

Dollhouse Beauty Academy is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with the law and how you can exercise your rights.

Scope and Applicability

The UK GDPR applies to the processing of personal data of individuals in the United Kingdom. While Dollhouse Beauty Academy does not maintain a user registration system or store personal data in a database, we may collect limited personal data through website analytics, server logs, and contact forms. This data is processed solely for the purpose of improving our website and responding to inquiries.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

  • Right of access – You can request a copy of the personal data we hold about you.
  • Right to rectification – You can request correction of any inaccurate or incomplete personal data.
  • Right to erasure – You can request deletion of your personal data, where applicable.
  • Right to restriction of processing – You can request we limit how we use your data.
  • Right to data portability – You can request your data in a structured, commonly used format.
  • Right to object – You can object to our processing of your data based on legitimate interest.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.

How We Comply

We do not collect personal data through cookies or tracking technologies beyond essential analytics necessary for site functionality. Any data received via our contact form is stored securely and retained only until your inquiry is resolved. We do not sell, share, or otherwise disclose personal data to third parties unless required by law.

Data We Process

The only personal data we may process includes:

  • Name and email address submitted via our contact form
  • IP address and browser information collected automatically through website analytics (anonymised where possible)

This data is not stored in a structured database and is not used for profiling or automated decision-making.

Legal Basis for Processing

Our legal basis for processing personal data is:

  • Legitimate interest – To operate and improve our website and respond to inquiries
  • Consent – When you voluntarily submit information via our contact form

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us directly at:

[email protected]

Include your full name, the right you wish to exercise, and any relevant details (e.g., email address used). We will respond without undue delay.

Response Timeframes

We aim to respond to all requests within one month. If your request is complex or numerous, we may extend this period by up to two additional months and will inform you within one month of receipt.

No Discrimination Policy

We will not deny you services, charge you different prices, or provide a different level of service because you have exercised your data protection rights.

Updates and Changes

We may update this page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date.

Contact Information

For all data protection inquiries, requests, or complaints, please contact:

Aurora Brandt
110 Lambton Quay, Wellington Central 6011, New Zealand
[email protected]

If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner’s Office at ico.org.uk.