UK GDPR Compliance
Artisan Chocolate Creations is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights as a data subject, even though we do not collect or store personal information through user registration or databases.
Scope and Applicability
The UK GDPR applies to the processing of personal data of individuals in the UK. While Artisan Chocolate Creations does not require users to register or provide personal information, we may collect limited, non-identifiable data through website analytics and cookies to improve user experience. This data is processed in accordance with UK GDPR principles.
Your Rights Under UK GDPR
Regardless of our limited data collection, you retain the following rights under UK GDPR:
- Right of access – to request confirmation of whether your personal data is being processed
- Right to rectification – to correct inaccurate personal data
- Right to erasure – to request deletion of your personal data
- Right to restrict processing – to limit how your data is used
- Right to data portability – to receive your data in a structured, machine-readable format
- Right to object – to object to processing based on legitimate interest
How We Comply
We do not maintain user profiles, databases, or account systems. Any data collected (e.g., IP addresses via analytics tools) is anonymised, aggregated, and retained only for statistical purposes. We use cookie banners to obtain clear consent for non-essential cookies, and provide easy opt-out mechanisms.
Data We Process
The only personal data we may process includes:
- IP addresses (anonymised via IP masking)
- Cookie identifiers for session and preference tracking
- Browser type and device information (for analytics)
This data is never linked to your name, email, or other identifying details.
Legal Basis for Processing
Our processing is based on legitimate interest for website functionality and performance optimisation, and on consent for non-essential cookies. We never process special category data.
How to Exercise Your Rights
To exercise any of your UK GDPR rights, please contact us via email at [email protected]. Include your request, any relevant details (e.g., IP address or cookie ID if known), and your name for verification. We will respond without undue delay.
Response Timeframes
We are required to respond to your request within one month of receipt. If the request is complex or numerous, we may extend this by two further months, and will inform you within one month of the reason for the delay.
No Discrimination Policy
We will not deny you access to our content, charge you fees, or provide you with a lower quality of service because you have exercised your data protection rights.
Updates and Changes
This page will be reviewed annually and updated if there are changes to UK GDPR or our data practices. The most recent version will always be posted here with an updated effective date.
Contact Information
If you have questions about this compliance page or wish to exercise your rights, please contact our data protection point of contact:
Evelina Hartwell
1026 North Park Street, Halifax, NS B3K 1E5, Canada
Email: [email protected]
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk.
