UK GDPR Compliance
At Smart Grass Shop UK, we are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights under UK GDPR, even though we do not collect or store personal data through user registration or databases.
Scope and Applicability
The UK GDPR applies to the processing of personal data of individuals in the UK. While our website is informational and does not require registration, we may collect limited personal data automatically through cookies and web analytics tools (such as Google Analytics) to understand how visitors interact with our content. This data is processed solely for the purpose of improving our website’s usability and content relevance.
Your Rights Under UK GDPR
Under UK GDPR, you have the following rights:
- Right of access: You may request confirmation of whether we hold any personal data about you.
- Right to rectification: You may request correction of any inaccurate personal data we hold.
- Right to erasure: You may request deletion of your personal data, where applicable.
- Right to restriction of processing: You may request we limit how we use your data.
- Right to data portability: You may request a copy of your data in a structured, commonly used format.
- Right to object: You may object to our processing of your data based on legitimate interests.
- Right to withdraw consent: Where consent is the legal basis, you may withdraw it at any time.
How We Comply
Although we do not maintain user accounts or databases, we ensure compliance by:
- Using only necessary cookies with prior consent via our cookie banner.
- Anonymising IP addresses in analytics tools.
- Regularly reviewing data processing activities.
- Ensuring third-party service providers (e.g., analytics platforms) comply with UK GDPR.
Data We Process
We may process the following types of personal data:
- IP addresses (anonymised)
- Browser type and device information
- Pages visited and time spent on site
- Cookie identifiers
This data is not linked to any individual’s name, email, or contact details.
Legal Basis for Processing
Our processing of personal data is based on legitimate interest — specifically, to improve our website’s performance and user experience. We do not use your data for profiling, automated decision-making, or direct marketing without explicit consent.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us at:
Include your full name, the right you wish to exercise, and any relevant details (e.g., email address used on the site). We will respond without undue delay.
Response Timeframes
We aim to respond to all requests within one month of receipt. In complex cases, we may extend this by two further months, and we will inform you within one month if this is necessary.
No Discrimination Policy
We will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised your rights under UK GDPR.
Updates and Changes
We may update this page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date.
Contact Information
If you have questions, concerns, or wish to lodge a complaint regarding our data practices, please contact:
Finley Ashbrook
Royal Pavilion, 4/5 Pavilion Buildings
Brighton BN1 1EE
United Kingdom
Email: [email protected]
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection: