UK GDPR Compliance
Suffolk Pony Parties is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with the law and how you can exercise your rights.
Scope and Applicability
This compliance page applies to all visitors of Suffolk Pony Parties’ website. Although we do not require user registration or maintain a customer database, we may collect limited personal data through website interactions such as contact form submissions, cookies used for analytics, and server log files.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights:
- Right of access – You can request a copy of any personal data we hold about you.
- Right to rectification – You can ask us to correct any inaccurate or incomplete personal data.
- Right to erasure – You can request the deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restrict processing – You can ask us to limit how we use your data under certain conditions.
- Right to data portability – You may request your data in a structured, commonly used, and machine-readable format.
- Right to object – You can object to our processing of your data based on legitimate interests, including profiling.
How We Comply
We do not store personal data beyond what is necessary for direct communication or event booking. Contact form submissions are handled manually and deleted after 30 days unless required for legal purposes. We use cookies only for essential website functionality and anonymous analytics (Google Analytics) with IP anonymisation enabled. We do not sell or share personal data with third parties for marketing purposes.
Data We Process
The personal data we may process includes:
- Name
- Email address
- Phone number
- Any information voluntarily provided via our contact form
This data is collected solely for the purpose of responding to inquiries and arranging bookings.
Legal Basis for Processing
We process personal data based on legitimate interest (to respond to your inquiries and provide services) and, where applicable, consent (when you voluntarily submit a contact form). We never process sensitive personal data.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us directly by email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details about your request. We will respond without undue delay.
Response Timeframes
We aim to respond to all requests within one month of receipt. In complex cases, this may be extended by two further months, and we will notify you if this occurs.
No Discrimination Policy
We will not deny you services, charge you different prices, or provide a different quality of service because you exercised your rights under UK GDPR.
Updates and Changes
We may update this page periodically to reflect changes in law or our practices. Any updates will be posted here with a revised effective date.
Contact Information
If you have any questions about this compliance page or wish to make a complaint, please contact:
Ainsley Rivers
5 Clinton Terrace
Kelburn
Wellington 6012
New Zealand
[email protected]
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection: ico.org.uk.
