UK GDPR Compliance

Cozy Cove Home Goods is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights under UK GDPR and what data we process when you visit our website.

Scope and Applicability

Although Cozy Cove Home Goods does not collect personal data through user registration or account creation, we may process limited personal data automatically through website analytics, cookies, and server logs. This includes IP addresses, browser types, device information, and usage patterns. These processing activities are subject to the UK GDPR because our website is accessible to individuals in the United Kingdom.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

• Right of access – to request a copy of the personal data we hold about you
• Right to rectification – to correct inaccurate or incomplete data
• Right to erasure – to request deletion of your personal data
• Right to restrict processing – to limit how we use your data
• Right to data portability – to receive your data in a structured, machine-readable format
• Right to object – to object to processing based on legitimate interests
• Right to withdraw consent – where processing is based on consent

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.

How We Comply

We do not store personal data in databases or user accounts. Any data collected via cookies or analytics tools is anonymised or pseudonymised where possible. We use only necessary cookies for site functionality and analytics, with clear cookie consent mechanisms. We retain server logs for no longer than 30 days unless required for security investigations.

Data We Process

The personal data we may process includes:

• IP addresses (temporary, anonymised after 30 days)
• Browser and device information
• Pages visited and time spent on site
• Cookie identifiers (for session and preference tracking)

No names, email addresses, phone numbers, or payment details are collected unless you voluntarily submit them via our contact form.

Legal Basis for Processing

We process data based on the following legal bases under UK GDPR:

• Legitimate interests – to improve website performance and user experience
• Consent – for non-essential cookies, obtained via our cookie banner
• Legal obligation – to comply with security and fraud prevention requirements

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us by email at [email protected]. In your message, please include:

1. Your full name
2. Your email address (if available)
3. A clear description of the right you wish to exercise
4. Any relevant details to help us locate your data

We may request additional information to verify your identity before responding.

Response Timeframes

We will respond to your request within one month of receipt. In complex cases, we may extend this period by up to two additional months, and we will inform you of any delay and the reasons for it.

No Discrimination Policy

We will not deny you goods or services, charge you different prices, or provide you with a different level of service because you exercised your rights under UK GDPR.

Updates and Changes

We may update this page from time to time to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date.

Contact Information

If you have any questions about this compliance page or wish to exercise your rights, please contact our data protection point of contact:

Oliver Kensington
[email protected]
Auckland War Memorial Museum, Museum Circuit, Parnell, Auckland 1010, New Zealand