UK GDPR Compliance

Dazzling Kids Shop is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with the law, what rights you have, and how to exercise them.

Scope and Applicability

The UK GDPR applies to the processing of personal data of individuals in the United Kingdom. While Dazzling Kids Shop does not require users to register or maintain a customer database, we do collect limited personal data automatically through website analytics, cookies, and server logs to improve user experience and ensure site functionality.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

• Right of access: You can request confirmation of whether we hold your personal data and obtain a copy of it.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to restrict processing: You may request we limit how we use your data under certain conditions.
• Right to data portability: You may request your data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to our processing of your data based on legitimate interests, including profiling.

How We Comply

We do not store personal data in databases, customer accounts, or mailing lists. Any data collected — such as IP addresses, browser type, or cookie identifiers — is used solely for analytical purposes and is either anonymised or retained for a maximum of 13 months before automatic deletion. We use secure, GDPR-compliant analytics tools and do not sell or share personal data with third parties for advertising purposes.

Data We Process

The personal data we may process includes:

• IP addresses (anonymised after 24 hours)
• Cookie identifiers for session and preference management
• Browser and device information for site optimisation
• Log data including pages visited and time spent

This data is not linked to names, email addresses, or other direct identifiers unless voluntarily provided via our contact form.

Legal Basis for Processing

We process data based on our legitimate interests in ensuring website security, improving user experience, and analysing traffic patterns. We do not rely on consent for these activities, as they are necessary for the proper functioning of our informational website. Where consent is required (e.g., non-essential cookies), we obtain it via our cookie banner.

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us by email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., email address used on the site, if applicable). We will respond without undue delay and within one month.

Response Timeframes

We are required by UK GDPR to respond to your request within one calendar month. In complex cases, we may extend this by two further months and will notify you if this is necessary.

No Discrimination Policy

We will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised your rights under UK GDPR.

Updates and Changes

We may update this compliance page from time to time. Any material changes will be posted here with a revised "Last Updated" date. We recommend reviewing this page periodically.

Contact Information

If you have questions about your data rights or our compliance with UK GDPR, please contact our data protection point of contact:

Elara Winslet
University of Bristol, Tyndall Avenue, Clifton, Bristol BS8 1TH, United Kingdom
Email: [email protected]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection: ico.org.uk.