UK GDPR Compliance

Curvy Girl Yoga is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how your rights are upheld under this law, even though we do not collect or store personal information through user registration or databases.

Scope and Applicability

The UK GDPR applies to the processing of personal data of individuals in the United Kingdom. While Curvy Girl Yoga does not require users to register or submit personal information, we may collect limited, automatically generated data through website analytics and cookies to improve user experience and site performance. This data is processed lawfully and minimally.

Your Rights Under UK GDPR

Regardless of the limited nature of our data processing, you retain the following rights under UK GDPR:

• Right of access: You may request confirmation of whether your personal data is being processed and receive a copy of it.
• Right to rectification: You may request correction of any inaccurate personal data.
• Right to erasure: You may request deletion of your personal data where applicable.
• Right to restriction of processing: You may request limitation of how your data is used.
• Right to data portability: You may request your data in a structured, commonly used format.
• Right to object: You may object to processing based on legitimate interest, including analytics.

How We Comply

Curvy Girl Yoga complies with UK GDPR by:

• Using only essential cookies with user consent via a clear banner
• Minimising data collection to anonymous analytics (e.g., page views, session duration)
• Not storing any personally identifiable information in databases
• Ensuring all third-party services (e.g., Google Analytics) comply with UK GDPR
• Reviewing data practices annually to maintain compliance

Data We Process

The only personal data we may process includes:

• IP addresses (anonymised)
• Browser type and device information
• Pages visited and time spent on site
• Cookie identifiers (for session and preference management)

This data is not linked to any individual identity and is used solely for site optimisation.

Legal Basis for Processing

Our processing of data is based on legitimate interest under Article 6(1)(f) UK GDPR. This includes improving website functionality, ensuring security, and delivering a better user experience. We balance this interest against your rights and freedoms, and we do not process data for profiling or automated decision-making.

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us directly via email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., browser or device information if known). We will respond without undue delay.

Response Timeframes

We aim to respond to all requests within one month of receipt. In complex cases, we may extend this period by up to two additional months and will inform you of the delay and reasons.

No Discrimination Policy

You will not be denied access to our content, services, or benefits for exercising your rights under UK GDPR. We do not penalise, restrict, or discriminate against any user for requesting access to, deletion of, or objection to data processing.

Updates and Changes

We may update this page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date. We recommend reviewing this page regularly.

Contact Information

If you have questions about this compliance page or wish to make a complaint, please contact:

Danielle Faircrest
Bristol Museum & Art Gallery
Queens Rd
Bristol
BS8 1RL
United Kingdom
[email protected]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection: ico.org.uk.