UK GDPR Compliance
Nelson's Equestrian and Pet Supplies is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights under UK GDPR, even though we do not store personal data in a user database or maintain a registration system.
Scope and Applicability
The UK GDPR applies to the processing of personal data of individuals in the United Kingdom. While Nelson's Equestrian and Pet Supplies does not collect personal information through user accounts or registrations, we may process limited personal data automatically through website analytics, cookies, and server logs for operational and security purposes.
Your Rights Under UK GDPR
Under UK GDPR, you have the following rights:
- Right of access – You may request confirmation of whether we process any of your personal data.
- Right to rectification – You may request correction of any inaccurate personal data we hold about you.
- Right to erasure – You may request deletion of your personal data, where applicable.
- Right to restrict processing – You may request limitation of how your data is used.
- Right to data portability – You may request a copy of your data in a structured, machine-readable format.
- Right to object – You may object to processing based on legitimate interests, including profiling or analytics.
- Right to withdraw consent – Where consent is the legal basis, you may withdraw it at any time.
How We Comply
We do not store personal data in databases, nor do we require user registration. Any personal data collected is limited to:
- IP addresses and browser information via analytics tools (e.g., Google Analytics)
- Cookies used for session management and website functionality
- Server logs for security and technical maintenance
We use anonymised and aggregated data wherever possible. We do not sell or share personal data with third parties for marketing purposes.
Data We Process
The only personal data we process includes:
- IP addresses (anonymised where possible)
- Cookie identifiers
- Device type and browser information
- Pages visited and time spent on site (aggregated)
This data is used solely to improve website performance, ensure security, and understand user engagement.
Legal Basis for Processing
Our processing is based on legitimate interest under Article 6(1)(f) UK GDPR, which includes:
- Maintaining website security and functionality
- Improving user experience through analytics
- Preventing fraud and technical abuse
We conduct regular assessments to ensure our interests do not override your rights and freedoms.
How to Exercise Your Rights
To exercise any of your UK GDPR rights, please contact us directly at:
Email: [email protected]
Include your full name, the right you wish to exercise, and any relevant details (e.g., email address used on the site). We will respond within one calendar month.
Response Timeframes
We are required to respond to your request without undue delay and, in any case, within one month of receipt. If your request is complex or numerous, we may extend this period by two further months, and we will notify you accordingly.
No Discrimination Policy
You will not be denied services, charged different prices, or receive a lower quality of service for exercising your rights under UK GDPR.
Updates and Changes
We may update this page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date.
Contact Information
If you have questions, concerns, or wish to lodge a complaint regarding our data processing practices, please contact:
Aria Whitfield
91 Saint Georges Bay Road, Parnell, Auckland 1052, New Zealand
Email: [email protected]
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK’s supervisory authority for data protection. Visit ico.org.uk for more information.
