UK GDPR Compliance
White Oak Wellness Retreat is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights as a data subject under UK data protection law.
Scope and Applicability
Although White Oak Wellness Retreat does not collect personal information through user registration or databases, we may process limited personal data automatically through website analytics, server logs, and cookies to improve user experience. This processing is subject to the UK GDPR as we offer information services to individuals in the United Kingdom.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights:
- Right of access – to request confirmation of whether we process your personal data and to receive a copy of it
- Right to rectification – to correct inaccurate or incomplete personal data
- Right to erasure – to request deletion of your personal data where there is no compelling reason for its continued processing
- Right to restriction of processing – to limit how we use your data under certain conditions
- Right to data portability – to receive your personal data in a structured, commonly used format
- Right to object – to object to processing based on legitimate interests, including profiling
- Right to withdraw consent – where processing is based on consent, you may withdraw it at any time
How We Comply
We do not store personal data in databases or user accounts. Any personal data collected (e.g., IP addresses via analytics, cookie identifiers) is processed anonymously or pseudonymised, retained for no longer than 12 months, and never linked to identifiable individuals. We use privacy-first analytics tools and implement cookie consent mechanisms compliant with UK GDPR requirements.
Data We Process
Under UK GDPR, the personal data we may process includes:
- IP addresses (anonymised)
- Cookies and similar tracking technologies (for site functionality and analytics)
- Browser type and device information
- Pages visited and time spent on site
This data is not used to identify individuals and is aggregated for statistical purposes only.
Legal Basis for Processing
Our processing of personal data is based on legitimate interest – specifically, to ensure the website functions properly, to analyse usage patterns for improvement, and to maintain security. We conduct regular balancing tests to ensure our interests do not override your rights and freedoms.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us by email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., IP address or cookie ID if known). We will respond without undue delay.
Response Timeframes
We are required by UK GDPR to respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of any delay and the reasons for it.
No Discrimination Policy
We will never deny you access to our website, reduce service quality, or treat you differently because you have exercised your data protection rights under UK GDPR.
Updates and Changes
We may update this compliance page periodically to reflect changes in law or our practices. The most recent version will always be posted here with an updated effective date.
Contact Information
If you have questions about this compliance page or wish to lodge a complaint, please contact:
Thaddeus Hawthorne
Email: [email protected]
Address: Queensland Art Gallery, Stanley Pl, South Brisbane QLD 4101, Australia
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), the supervisory authority for data protection in the UK: https://ico.org.uk.
