UK GDPR Compliance
Infinite Wellness Yoga is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with these rights, even though we do not store personal data through user registration or databases.
Scope and Applicability
The UK GDPR applies to the processing of personal data of individuals in the United Kingdom. While Infinite Wellness Yoga does not collect personal information through accounts or forms, we may automatically process limited personal data via cookies, web analytics, and server logs for site functionality and performance improvement.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights:
- Right of access – to know what personal data we hold about you
- Right to rectification – to correct inaccurate data
- Right to erasure – to request deletion of your data
- Right to restrict processing – to limit how your data is used
- Right to data portability – to receive your data in a structured format
- Right to object – to object to processing based on legitimate interest
- Right to withdraw consent – where consent is the legal basis
How We Comply
We do not maintain databases of personal information. Any data collected is limited to:
- IP addresses via server logs (anonymised after 30 days)
- Cookies for site functionality and analytics (non-identifying, aggregated)
- Browser type and language settings for content optimisation
We do not sell, share, or profile personal data. We use only first-party, non-tracking analytics tools. All data is processed lawfully under the legal basis of legitimate interest for website operation and user experience improvement.
Data We Process
The personal data we may process includes:
- IP address (temporary, anonymised)
- Cookie identifiers (session or functional only)
- Device type and browser information
- Pages visited and time spent on site (aggregated)
No names, emails, phone numbers, or payment details are collected or stored.
Legal Basis for Processing
Our processing is based on legitimate interest under Article 6(1)(f) of the UK GDPR. This includes ensuring website functionality, improving user experience, and maintaining site security. We balance this interest against your rights and freedoms, and we do not process data for profiling or automated decision-making.
How to Exercise Your Rights
To exercise any of your rights under the UK GDPR, please contact us by email at [email protected]. Include your name and the right you wish to exercise. We will respond without undue delay and within one month.
Response Timeframes
We are required by law to respond to your request within one month of receipt. In complex cases, we may extend this by two additional months and will inform you if this is necessary.
No Discrimination Policy
We will never deny you access to our content, services, or features because you have exercised your data protection rights. You may opt out of cookies at any time via your browser settings without penalty.
Updates and Changes
We may update this page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date. We recommend reviewing this page occasionally.
Contact Information
If you have questions, concerns, or wish to exercise your rights under the UK GDPR, please contact our data protection point of contact:
Maeve Larkspur
56 Fort Street, Auckland CBD, Auckland 1010, New Zealand
[email protected]
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK’s independent supervisory authority for data protection. Visit ico.org.uk for more information.
Write a comment