UK GDPR Compliance
At Shades Home & Gift Shopping, we are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights under UK GDPR and the data we may process when you visit our website.
Scope and Applicability
This compliance page applies to all visitors to shadeshomeandgift.co.uk. Although we do not collect personal data through user registration or account creation, we may automatically gather limited information such as IP addresses, browser type, and usage patterns via analytics tools and cookies. These practices are subject to UK GDPR where applicable.
Your Rights Under UK GDPR
Under UK GDPR, you have the following rights:
- Right of access – to know what personal data we hold about you
- Right to rectification – to correct any inaccurate or incomplete data
- Right to erasure – to request deletion of your personal data
- Right to restrict processing – to limit how we use your data
- Right to data portability – to receive your data in a structured, machine-readable format
- Right to object – to object to processing based on legitimate interest
- Right to withdraw consent – where processing relies on consent
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.
How We Comply
We do not store personal data in databases, maintain user accounts, or collect identifiable information beyond what is automatically and transiently logged by our website hosting and analytics services. We use cookies only for essential functionality and anonymous analytics. All third-party tools we use (e.g., Google Analytics) are configured to comply with UK GDPR, including IP anonymisation and data processing agreements.
Data We Process
The only personal data we may process includes:
- IP addresses (anonymised where possible)
- Browser and device information
- Usage data (pages visited, time spent)
- Cookie identifiers (for session and preference management)
This data is not linked to any individual identity and is not retained beyond what is necessary for website functionality and security.
Legal Basis for Processing
Our processing of personal data is based on legitimate interest – specifically, the need to ensure website security, improve user experience, and analyse traffic for operational purposes. We do not rely on consent for this processing, but you may opt out of non-essential cookies at any time via our cookie banner.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us directly at:
Ember Lynley
[email protected]
Include your full name, the right you wish to exercise, and any relevant details (e.g., IP address or date of visit if known). We will respond within one month.
Response Timeframes
We are required by UK GDPR to respond to your request without undue delay and, in any case, within one month of receipt. In complex cases, we may extend this period by two further months, and we will inform you of any delay and the reasons for it.
No Discrimination Policy
We will never deny you access to our website, charge you fees, or provide you with a lower quality of service because you have exercised your rights under UK GDPR.
Updates and Changes
We may update this compliance page from time to time to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date.
Contact Information
If you have any questions, requests, or complaints regarding your data rights under UK GDPR, please contact:
Ember Lynley
Email: [email protected]
Address: Museum of New Zealand Te Papa Tongarewa, 55 Cable Street, Te Aro, Wellington 6011, New Zealand
You may also contact the Information Commissioner’s Office at ico.org.uk or by phone at 0303 123 1113.
