UK GDPR Compliance
Fleurie Guest House is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with these rights, even though we do not store personal data in a database or require user registration.
Scope and Applicability
The UK GDPR applies to the processing of personal data of individuals in the United Kingdom. While Fleurie Guest House does not collect personal information through registration or forms, we may automatically process limited personal data via website analytics, server logs, and cookies to improve user experience and site functionality. This page outlines how we handle such data in compliance with UK GDPR.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights:
- Right of access: You may request confirmation of whether we process any personal data about you.
- Right to rectification: You may request correction of any inaccurate personal data.
- Right to erasure: You may request deletion of your personal data where applicable.
- Right to restriction of processing: You may request limitation on how your data is used.
- Right to data portability: You may request a copy of your data in a structured, machine-readable format.
- Right to object: You may object to processing based on legitimate interest, including analytics.
How We Comply
We do not maintain a database of personal information. Any personal data collected automatically (e.g., IP addresses via analytics tools, cookie identifiers) is processed only for essential site functionality and is not linked to identifiable individuals. We use privacy-preserving analytics with IP anonymisation and do not share data with third parties for advertising purposes. All cookies are either strictly necessary or require prior consent.
Data We Process
The only personal data we may process includes:
- IP addresses (anonymised)
- Cookies for site functionality and analytics
- Server logs containing visit timestamps and pages viewed
This data is not stored beyond 30 days and is not used to identify individuals.
Legal Basis for Processing
Our processing of personal data is based on legitimate interest under Article 6(1)(f) UK GDPR, specifically to ensure the website operates securely, efficiently, and provides an improved user experience. We have conducted a Legitimate Interest Assessment and determined that our processing is minimal, non-intrusive, and balanced against your rights.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us via email at [email protected]. Include your name, the right you wish to exercise, and any relevant details (e.g., browser or device information if known). We will respond without undue delay.
Response Timeframes
We are required to respond to your request within one month of receipt. In complex cases, this may be extended by two further months, and we will inform you if this occurs.
No Discrimination Policy
We will not deny you services, charge you different prices, or provide a lower quality of experience because you exercised your rights under UK GDPR.
Updates and Changes
We may update this page from time to time to reflect changes in law or our practices. The most recent version will always be posted here with an updated effective date.
Contact Information
If you have questions about this compliance page or wish to exercise your rights, please contact our data protection point of contact:
Callum Hawkes
50 Grenfell Street, Adelaide SA 5000, Australia
Email: [email protected]
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk.
