UK GDPR Compliance
This page explains how Lancashire Lodges & Retreats complies with the UK General Data Protection Regulation (UK GDPR), which governs the protection of personal data in the United Kingdom.
Scope and Applicability
The UK GDPR applies to the processing of personal data of individuals in the UK. While Lancashire Lodges & Retreats does not collect personal data through user registration or account creation, we do process limited personal data through website analytics, server logs, and cookies to improve user experience and site functionality.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights:
- Right of access – You may request confirmation of whether we hold your personal data and receive a copy of it.
- Right to rectification – You may request correction of any inaccurate or incomplete personal data we hold about you.
- Right to erasure – You may request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restriction of processing – You may request we limit how we use your data under certain conditions.
- Right to data portability – You may request your data in a structured, commonly used format.
- Right to object – You may object to processing based on legitimate interests, including profiling and direct marketing.
- Right not to be subject to automated decision-making – We do not use automated decision-making or profiling.
How We Comply
We do not store personal data in databases or user accounts. Any personal data collected (e.g., through contact forms or analytics) is processed minimally and securely. We use encrypted connections (HTTPS), anonymize analytics data where possible, and retain logs only as long as necessary for security and operational purposes.
Data We Process
The personal data we may process includes:
- IP addresses (anonymized in analytics tools)
- Browser type and device information
- Pages visited and time spent on site
- Information submitted via our contact form (name, email, message)
This data is not linked to any individual identity beyond what is necessary for communication or security.
Legal Basis for Processing
We process data under the following lawful bases:
- Legitimate interests – For website functionality, security, and performance monitoring.
- Consent – For cookies that are not strictly necessary (you may withdraw consent at any time via our cookie banner).
- Contractual necessity – To respond to inquiries submitted via our contact form.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us directly by email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., email address used to contact us). We will respond without undue delay.
Response Timeframes
We aim to respond to all requests within one month of receipt. If your request is complex or numerous, we may extend this period by up to two additional months and will inform you within one month of receipt.
No Discrimination Policy
We will not deny you services, charge different prices, or provide a different quality of service because you have exercised your rights under UK GDPR.
Updates and Changes
This page will be reviewed annually and updated as required by law or changes in our data practices. The most recent version will always be available here, with the effective date displayed below.
Last Updated: 5 April 2024
Contact Information
If you have any questions, concerns, or wish to lodge a complaint regarding your data rights, please contact:
Willa Galbraith
Owner, Lancashire Lodges & Retreats
Email: [email protected]
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), the supervisory authority for data protection in the UK: https://ico.org.uk
