UK GDPR Compliance
This page explains how Bewitchery Blog complies with the UK General Data Protection Regulation (UK GDPR), which governs the protection of personal data in the United Kingdom. Although Bewitchery Blog does not collect personal information through user registration or databases, we are committed to transparency and respect for your data rights under UK GDPR.
Scope and Applicability
The UK GDPR applies to any processing of personal data of individuals in the UK, regardless of where the data controller is based. While Bewitchery Blog is operated from South Africa, we use analytical tools and cookies that may collect limited personal data from UK visitors. As such, we comply with UK GDPR obligations to ensure your rights are upheld.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights:
- Right of access – to request confirmation of whether your personal data is being processed and to receive a copy of it.
- Right to rectification – to correct inaccurate or incomplete personal data.
- Right to erasure – to request deletion of your personal data in certain circumstances.
- Right to restriction of processing – to limit how your data is used.
- Right to data portability – to receive your data in a structured, commonly used format.
- Right to object – to object to processing based on legitimate interest, including profiling or analytics.
- Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.
- Right to lodge a complaint – with the Information Commissioner’s Office (ICO) if you believe your rights have been violated.
How We Comply
Bewitchery Blog does not store personal data in user accounts or databases. We use third-party analytics services (e.g., Google Analytics) and cookies to understand website traffic and improve user experience. These tools collect anonymised or pseudonymised data such as IP addresses, browser type, and pages visited. We ensure these services comply with UK GDPR by using data processing agreements, anonymisation techniques, and privacy-by-design practices.
Data We Process
The personal data we may process includes:
- IP addresses (anonymised)
- Cookie identifiers
- Device and browser information
- Pages viewed and time spent on site
This data is not linked to your name, email, or other identifying details. We do not collect names, phone numbers, addresses, or payment information.
Legal Basis for Processing
Our processing of personal data is based on legitimate interest – specifically, to improve our website’s functionality, understand audience preferences, and ensure content relevance. We balance this interest against your rights and freedoms. Where consent is required (e.g., for non-essential cookies), we obtain it through our cookie banner before any non-essential tracking occurs.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us at [email protected] with the subject line: “UK GDPR Request”. Include your email address or IP address (if known) and specify the right you wish to exercise. We will respond without undue delay and within one month.
Response Timeframes
We are required to respond to your request within one month of receipt. In complex cases, this may be extended by two further months, and we will inform you of any delay and the reasons for it.
No Discrimination Policy
You will not be denied access to our content, services, or features if you exercise your rights under UK GDPR. We do not penalise, restrict, or discriminate against users who choose to opt out of tracking or request data deletion.
Updates and Changes
We may update this compliance page from time to time to reflect changes in law or our practices. The latest version will always be posted here with an updated effective date.
Contact Information
If you have any questions about your rights under UK GDPR or wish to make a request, please contact our data protection point of contact:
Jenna Carrow
1 Maryvale Road, Westville, Durban, 3629, KwaZulu-Natal, South Africa
Email: [email protected]
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection: ico.org.uk.