UK GDPR Compliance
Blossom Learning is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with these rights, even though we do not collect personal data through user registration or databases. We only process limited data automatically through website analytics and cookies.
Scope and Applicability
The UK GDPR applies to the processing of personal data of individuals in the UK. While Blossom Learning does not require users to register or submit personal information, we may collect limited, anonymised data such as IP addresses, browser types, and usage patterns via analytical tools like Google Analytics. This data is processed solely for improving website functionality and user experience.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights:
- Right of access: You may request confirmation of whether your personal data is being processed and obtain a copy of it.
- Right to rectification: You may request correction of any inaccurate or incomplete personal data.
- Right to erasure: You may request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restrict processing: You may request that we limit how your data is used under certain conditions.
- Right to data portability: You may request your data in a structured, commonly used, and machine-readable format.
- Right to object: You may object to processing based on legitimate interests, including profiling and direct marketing.
How We Comply
We do not store personal data in identifiable databases. Any data collected via cookies or analytics is aggregated and anonymised. We use cookie consent banners to obtain prior consent for non-essential cookies. We retain analytical data for no longer than necessary and regularly review our data handling practices to ensure compliance with UK GDPR principles.
Data We Process
The only personal data we process includes:
- IP addresses (anonymised)
- Browser and device information
- Pages visited and time spent on site
- Cookie identifiers (for session and preference management)
This data is never linked to your name, email, or other personally identifiable information.
Legal Basis for Processing
Our processing of data is based on legitimate interest under Article 6(1)(f) of the UK GDPR. We have a legitimate interest in understanding how users interact with our educational resources to improve content delivery and website performance. This interest is balanced against your rights and freedoms, and we ensure minimal data collection and full anonymisation.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us at:
Include your full name, the right you wish to exercise, and any relevant details (e.g., browser or device used). We will respond without undue delay and within one month.
Response Timeframes
We are required by UK GDPR to respond to your request within one month of receipt. In complex cases, we may extend this period by up to two additional months, and we will notify you if this is necessary.
No Discrimination Policy
We will never deny you access to our educational resources, charge you fees, or provide a lower quality of service because you have exercised your data protection rights under UK GDPR.
Updates and Changes
We may update this compliance page periodically to reflect changes in law or our practices. The most recent version will always be posted here with an updated effective date.
Contact Information
If you have any questions about your rights under UK GDPR, or wish to make a complaint, please contact:
Eliza Fairweather
Email: [email protected]
Address: 82 King William Street, Adelaide SA 5000, Australia
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.