UK GDPR Compliance

Farah's Bridal & Couture is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights under UK GDPR, even though we do not store personal data through user registration or databases.

Scope and Applicability

This compliance page applies to all visitors of farahscouture.co.uk. While we do not collect personal data through forms, accounts, or databases, we may process limited personal data automatically through website analytics, cookies, and server logs for operational and security purposes.

Your Rights Under UK GDPR

Under UK GDPR, you have the following rights:

• Right of access – to know what personal data we hold about you
• Right to rectification – to correct any inaccurate personal data
• Right to erasure – to request deletion of your personal data
• Right to restrict processing – to limit how your data is used
• Right to data portability – to receive your data in a structured, machine-readable format
• Right to object – to object to processing based on legitimate interest
• Right to withdraw consent – where processing relies on consent

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK’s independent supervisory authority for data protection.

How We Comply

As an informational website with no user accounts or data collection forms, we do not store personal data beyond what is automatically generated by your visit. We use cookies for essential site functionality and analytics (e.g., Google Analytics), which are configured to anonymise IP addresses. We do not sell, share, or profile personal data for advertising.

Data We Process

The only personal data we may process includes:

• IP addresses (anonymised via Google Analytics)
• Browser type and device information
• Pages visited and session duration
• Cookie identifiers for session management

This data is not linked to any individual identity and is retained only for statistical and security purposes.

Legal Basis for Processing

Our processing of personal data is based on legitimate interest for website functionality, security, and analytics. We do not process sensitive personal data under UK GDPR.

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us directly by email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., browser or device information if known). We will respond without undue delay.

Response Timeframes

We aim to respond to all requests within one month of receipt, as required by UK GDPR. If your request is complex or numerous, we may extend this period by up to two additional months, and we will inform you within one month of receipt.

No Discrimination Policy

We will not deny you services, charge you different prices, or provide a different quality of service because you exercised your rights under UK GDPR.

Updates and Changes

We may update this page periodically to reflect changes in law or our practices. The most recent version will always be posted here with an updated effective date.

Contact Information

If you have any questions about this compliance page or wish to exercise your rights, please contact:

Serena Featherstone
120 Spencer St, Melbourne VIC 3000, Australia
[email protected]

Effective Date: 26 May 2024