UK GDPR Compliance

At Middlesex Marquees, we are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights under UK GDPR, even though we do not store personal data in a database or require user registration.

Scope and Applicability

The UK GDPR applies to the processing of personal data of individuals in the UK. While our website is informational and does not collect personal data through forms or registrations, we may automatically collect limited data such as IP addresses, browser type, and usage patterns via analytics tools and server logs for site functionality and security purposes.

Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access – You may request confirmation of whether we hold any of your personal data.
• Right to rectification – You may request correction of any inaccurate personal data we hold.
• Right to erasure – You may request deletion of your personal data where applicable.
• Right to restriction of processing – You may request we limit how we use your data.
• Right to data portability – You may request a copy of your data in a structured, machine-readable format.
• Right to object – You may object to our processing of your data based on legitimate interests.

How We Comply

We do not maintain a user database or collect personal data for marketing or profiling. Any data collected automatically (e.g., via cookies or server logs) is used solely for site operation, security, and anonymous analytics. We do not sell, share, or transfer personal data to third parties for commercial purposes.

Data We Process

The only personal data we may process includes:

• IP addresses (logged temporarily for security)
• Browser and device information (for analytics)
• Cookie identifiers (for site functionality)

This data is not linked to your identity and is not retained beyond necessary operational periods.

Legal Basis for Processing

Our processing of personal data is based on legitimate interest under Article 6(1)(f) of UK GDPR, specifically for:

• Ensuring website security and integrity
• Improving user experience through anonymous analytics
• Maintaining operational functionality

How to Exercise Your Rights

To exercise any of your UK GDPR rights, please contact us via email at [email protected]. Include your name, contact details, and a clear description of your request. We will respond without undue delay.

Response Timeframes

We are required to respond to your request within one month of receipt. In complex cases, we may extend this period by up to two additional months and will inform you if this is necessary.

No Discrimination Policy

You will not be denied services, charged different prices, or receive a lower quality of service for exercising your rights under UK GDPR.

Updates and Changes

We may update this page from time to time to reflect changes in law or our practices. Any updates will be posted here with a revised effective date.

Contact Information

If you have questions about this compliance page or wish to exercise your rights, please contact our data protection point of contact:

Silas Thornfield
12-32 Rothschild Ave, Rosebery NSW 2018, Australia
Email: [email protected]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection: ico.org.uk.