UK GDPR

Nov, 15 2024

UK GDPR Compliance

This page explains how Holiday Booking Hub complies with the UK General Data Protection Regulation (UK GDPR), which governs the protection of personal data in the United Kingdom. While we do not store user accounts or maintain a database of personal information, we collect limited data through automated means to enhance your experience on this informational website.

Scope and Applicability

The UK GDPR applies to the processing of personal data of individuals in the UK. Although Holiday Booking Hub is operated from Canada, we comply with UK GDPR because our website is accessible to and used by individuals in the United Kingdom. We process only minimal data necessary for website functionality and analytics.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of access – You can request confirmation of whether we process your personal data and obtain a copy of it.
  • Right to rectification – You may request correction of inaccurate or incomplete personal data.
  • Right to erasure – You can request deletion of your personal data where there is no compelling reason for its continued processing.
  • Right to restriction of processing – You may request that we limit how we use your data under certain conditions.
  • Right to data portability – You may request your data in a structured, commonly used, and machine-readable format.
  • Right to object – You may object to processing based on legitimate interests, including profiling or direct marketing.

How We Comply

Holiday Booking Hub complies with UK GDPR by:

  • Collecting only non-identifiable data via cookies and analytics tools (e.g., Google Analytics) for site performance and user experience.
  • Not storing personal data in databases, user accounts, or forms.
  • Providing clear information about data processing through this compliance page and our separate Privacy Policy.
  • Ensuring third-party service providers (e.g., analytics platforms) comply with UK GDPR.
  • Implementing technical measures to protect data integrity and confidentiality.

Data We Process

The only personal data we process includes:

  • IP addresses (anonymised where possible)
  • Browser type and device information
  • Pages visited and time spent on site
  • Cookies and similar tracking technologies for analytics and functionality

No names, email addresses, phone numbers, or payment details are collected or stored on this website.

Legal Basis for Processing

Our processing of personal data is based on legitimate interest under Article 6(1)(f) of the UK GDPR. This includes:

  • Improving website performance and user experience
  • Ensuring site security and functionality
  • Understanding how visitors interact with our content

We balance these interests against your rights and freedoms, and we do not process data for profiling or automated decision-making.

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us at:

Email: [email protected]

Include your full name, the right you wish to exercise, and any relevant details (e.g., IP address or date of visit if known). We will respond without undue delay.

Response Timeframes

We aim to respond to all requests within one month of receipt, as required by UK GDPR. In complex cases, we may extend this period by two additional months and will inform you within one month of the reason for the delay.

No Discrimination Policy

You will not be denied access to our website, charged different prices, or receive a lower quality of service for exercising your rights under UK GDPR.

Updates and Changes

We may update this page periodically to reflect changes in law or our data practices. The most recent version will always be posted here with an updated effective date.

Contact Information

If you have any questions about this UK GDPR compliance page or wish to raise a concern, please contact:

Aria Winslow
70 The Esplanade, Toronto, ON M5E 1R2, Canada
Email: [email protected]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection: ico.org.uk.