Magnus Whitmore Oct 10 0 Comments

UK GDPR Compliance

The Culinary Crafts Academy is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with the law, what rights you have, and how to exercise them.

Scope and Applicability

This compliance page applies to all visitors of seasonsartisanschool.co.uk. While we do not collect personal data through registration or accounts, we may process limited personal data automatically via website analytics, cookies, and server logs to improve user experience and site functionality. This processing is subject to the UK GDPR.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

Right of access: You can request confirmation of whether we process your personal data and obtain a copy of it.
Right to rectification: You may request correction of any inaccurate or incomplete personal data.
Right to erasure: You may request deletion of your personal data where there is no compelling reason for its continued processing.
Right to restriction of processing: You may request we limit how we use your data under certain conditions.
Right to data portability: You may request your data in a structured, commonly used, and machine-readable format.
Right to object: You may object to our processing of your data based on legitimate interests, including profiling.

How We Comply

We do not store personal data in databases or user accounts. Any data collected — such as IP addresses or cookie identifiers — is used solely for analytical purposes, aggregated and anonymised where possible. We use secure, GDPR-compliant analytics tools with data processing agreements. We do not sell or share personal data with third parties for marketing purposes.

Data We Process

The only personal data we may process includes:

IP addresses (anonymised after 24 hours)
Cookies for site functionality and analytics (e.g., Google Analytics with IP anonymisation enabled)
Server logs containing timestamps and page requests

No names, email addresses, phone numbers, or other identifying information are collected unless voluntarily provided via our contact form.

Legal Basis for Processing

Our legal basis for processing is legitimate interest — specifically, to ensure the website operates securely, functions correctly, and provides an improved user experience. We conduct regular balancing tests to ensure our interests do not override your rights and freedoms.

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us directly at:

[email protected]

Include your full name, the right you wish to exercise, and any relevant details (e.g., IP address or date of visit if known). We will respond without undue delay.

Response Timeframes

We are required to respond to your request within one month of receipt. In complex cases, we may extend this to three months and will inform you if this is necessary.

No Discrimination Policy

We will never deny you access to our content, charge you fees, or provide you with a lower quality of service because you have exercised your rights under UK GDPR.

Updates and Changes

We may update this page periodically to reflect changes in law or our practices. The most recent version will always be posted here with an updated effective date.