UK GDPR Compliance

At Penarth Guest Accommodations, we are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights under UK GDPR and the data we may process when you visit our website.

Scope and Applicability

This compliance page applies to all visitors of penarthguesthouse.co.uk. While we do not maintain a user registration system or store personal data in a database, we may collect limited personal data through automated means such as web server logs, cookies, and analytics tools to improve site functionality and user experience.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

Right of access – You may request confirmation of whether we process your personal data and obtain a copy of it.
Right to rectification – You may request correction of inaccurate or incomplete personal data.
Right to erasure – You may request deletion of your personal data where there is no compelling reason for its continued processing.
Right to restriction of processing – You may request we limit how we use your data under certain conditions.
Right to data portability – You may request your data in a structured, commonly used, and machine-readable format.
Right to object – You may object to processing based on legitimate interests, including profiling or direct marketing.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.

How We Comply

We do not store personal data beyond what is necessary for technical operation. Any data collected via cookies or analytics is aggregated and anonymised where possible. We use only essential cookies and provide clear notice via our cookie banner. We do not sell or share personal data with third parties for commercial purposes.

Data We Process

The personal data we may process includes:

IP addresses (anonymised after 24 hours)
Browser type and device information
Pages visited and time spent on site
Cookie identifiers (for session management only)

No names, email addresses, phone numbers, or payment details are collected or stored on our website.

Legal Basis for Processing

Our processing of personal data is based on legitimate interest to ensure the website functions correctly, improves user experience, and maintains security. We conduct regular assessments to ensure this interest does not override your rights and freedoms.

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us directly by email at [email protected]. Include your full name and a clear description of the right you wish to exercise. We will respond without undue delay.

Response Timeframes

We aim to respond to all requests within one month of receipt. In complex cases, we may extend this period by up to two additional months, and we will inform you of any delay and the reasons.

No Discrimination Policy

We will not deny you services, charge different prices, or provide a different quality of service because you exercised your rights under UK GDPR.

Updates and Changes

We may update this compliance page periodically to reflect changes in law or our practices. The most recent version will always be posted here with an updated effective date.

Contact Information

If you have questions about your rights or our data practices under UK GDPR, please contact:

Evan Blackwood
50 Charles St E, Toronto, ON M4Y 0C3, Canada
[email protected]