UK GDPR Compliance
Pembrokeshire Art Services is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with the law and how you can exercise your rights.
Scope and Applicability
Although Pembrokeshire Art Services does not collect personal data through user registration or databases, we may automatically process limited personal data via website analytics tools and server logs. This includes IP addresses, browser types, and usage patterns collected for statistical purposes. The UK GDPR applies to this limited processing as we operate within the UK and process data of individuals in the UK.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights:
- Right of access – to know what personal data we hold about you
- Right to rectification – to correct inaccurate or incomplete data
- Right to erasure – to request deletion of your personal data
- Right to restrict processing – to limit how we use your data
- Right to data portability – to receive your data in a structured format
- Right to object – to object to processing based on legitimate interest
- Right not to be subject to automated decision-making
How We Comply
We do not store personal data in databases or user accounts. Any data collected via analytics tools is aggregated and anonymised where possible. We use only necessary cookies for site functionality and performance, with user consent obtained via our cookie banner. We do not sell or share personal data with third parties for marketing purposes.
Data We Process
The only personal data we may process includes:
- IP addresses (anonymised in analytics)
- Browser and device information
- Pages visited and time spent on site
- Cookie identifiers (for session and preference management)
This data is processed solely for website performance and user experience optimisation.
Legal Basis for Processing
Our legal basis for processing is legitimate interest under Article 6(1)(f) UK GDPR. This includes improving website functionality, understanding user behaviour, and ensuring security. We balance this interest against your rights and freedoms, and we do not process data where your interests override ours.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us by email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., email address used to visit the site). We will respond without undue delay.
Response Timeframes
We aim to respond to all requests within one month of receipt. If your request is complex or numerous, we may extend this period by up to two additional months and will inform you within one month of receipt.
No Discrimination Policy
We will not deny you access to our services, charge you fees, or provide you with a different level of service because you exercised your rights under UK GDPR.
Updates and Changes
We may update this page from time to time to reflect changes in the law or our practices. Any updates will be posted here with a revised effective date.
Contact Information
If you have questions about this compliance page or wish to exercise your rights, please contact:
Gideon Wynne
[email protected]
Public Fairmont Hotel Vancouver, 900 W Georgia St, Vancouver, BC V6C 2W6, Canada
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection: ico.org.uk.
