UK GDPR

Nov, 9 2024

UK GDPR Compliance

Bristol Community Connect is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights under UK GDPR, even though we do not store personal data through registration or databases.

Scope and Applicability

This compliance page applies to all visitors of Bristol Community Connect (emerge-bristol.co.uk). While we do not collect personal data through user accounts, forms, or databases, we may process limited personal data automatically via website analytics, cookies, and server logs to improve user experience and site functionality.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

  • Right of access: You can request confirmation of whether we process any personal data about you.
  • Right to rectification: You may request correction of any inaccurate personal data we hold.
  • Right to erasure: You may request deletion of your personal data where applicable.
  • Right to restriction of processing: You may request we limit how your data is used.
  • Right to data portability: You may request a copy of your data in a structured, machine-readable format.
  • Right to object: You may object to processing based on legitimate interests, including analytics.
  • Right to withdraw consent: Where consent is the legal basis, you may withdraw it at any time.

How We Comply

We do not store personal data in user profiles or databases. Any data collected (e.g., IP addresses, cookie identifiers, browser type) is used solely for analytics via Google Analytics, which is configured to anonymise IP addresses. We retain this data for no longer than 26 months and do not share it with third parties for marketing or profiling purposes. We maintain a data processing record and conduct regular privacy reviews.

Data We Process

The personal data we may process includes:

  • IP addresses (anonymised)
  • Cookie identifiers for site functionality
  • Browser type and device information
  • Pages visited and time spent on site

This data is collected automatically and is not linked to any identifiable individual.

Legal Basis for Processing

We rely on legitimate interest as our legal basis for processing, specifically to: (1) improve website performance and user experience, and (2) ensure site security. We balance this interest against your rights and freedoms. Where consent is required (e.g., non-essential cookies), we obtain it via our cookie banner.

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us at:

Email: [email protected]

Include your full name, the right you wish to exercise, and any relevant details (e.g., date of visit, browser used). We will respond without undue delay.

Response Timeframes

We aim to respond to all requests within one month of receipt. If your request is complex or numerous, we may extend this to three months and will notify you within one month of the delay.

No Discrimination Policy

We will not deny you services, charge different prices, or provide a lower quality of service because you exercised your UK GDPR rights.

Updates and Changes

We may update this page periodically to reflect changes in law or our practices. The most recent version will always be posted here with an updated effective date.

Contact Information

If you have questions about this compliance page or wish to lodge a complaint, please contact:

Evangeline Rivers
63 Cafe Street, Penicuik EH26 8HQ, United Kingdom
Email: [email protected]

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk.