back

UK GDPR

Thaddeus VanDoren 0 Comments 17 July 2023

UK GDPR Compliance

Mischievous Prague Pleasures is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights as a data subject, even though we do not collect personal information through registration or databases.

Scope and Applicability

The UK GDPR applies to the processing of personal data of individuals in the United Kingdom. While Mischievous Prague Pleasures does not require users to register, create accounts, or submit personal information, we may automatically collect limited data through website analytics and cookies to improve user experience and site functionality.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

  • Right of access: You may request confirmation of whether we hold any personal data about you.
  • Right to rectification: You may request correction of any inaccurate personal data we hold.
  • Right to erasure: You may request deletion of your personal data, where applicable.
  • Right to restriction of processing: You may request we limit how your data is used.
  • Right to data portability: You may request a copy of your data in a structured, machine-readable format.
  • Right to object: You may object to processing based on legitimate interest, including profiling or analytics.

How We Comply

We do not store personal data in databases, nor do we require user registration. Any personal data collected is limited to:

  • IP addresses (anonymized where possible)
  • Browser and device information via analytics cookies
  • Log data from website visits (e.g., pages viewed, time spent)

This data is processed solely for site performance and user experience improvement. We use third-party analytics tools (e.g., Google Analytics) with IP anonymization enabled and do not share data with advertisers or third parties for profiling.

Data We Process

The only personal data we process, as defined under UK GDPR, includes:

  • Automatically collected technical identifiers (e.g., IP address, cookie IDs)
  • Usage patterns via analytics tools

No names, email addresses, phone numbers, or payment details are collected or stored.

Legal Basis for Processing

Our processing of personal data is based on legitimate interest under Article 6(1)(f) of the UK GDPR. This includes improving website functionality, ensuring security, and analyzing traffic to enhance content delivery. We have conducted a Legitimate Interest Assessment and determined that our processing is proportionate and does not unduly impact your privacy.

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us directly at:

[email protected]

Include your full name, the right you wish to exercise, and any relevant details (e.g., IP address or date of visit if known). We will respond without undue delay and within one calendar month.

Response Timeframes

We are legally required to respond to your request within one month of receipt. In complex cases, we may extend this period by two further months, and we will notify you if this occurs.

No Discrimination Policy

We will not deny you access to our services, charge you different prices, or provide a different quality of service because you exercised your rights under UK GDPR.

Updates and Changes

We may update this page periodically to reflect changes in law or our practices. The most recent version will always be posted here with an updated effective date.

Contact Information

For any questions, requests, or complaints regarding your data protection rights under UK GDPR, please contact:

Thaddeus VanDoren
Email: [email protected]
Address: Loblaws, 60 Carlton St, Toronto, ON M5B 1J2, Canada

If you believe we have not complied with your rights, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk