UK GDPR Compliance
Impact Tissue is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights under UK GDPR and the data we process through our website.
Scope and Applicability
This compliance page applies to all visitors of impacttissue.co.uk. While we do not require users to register or create accounts, we may collect limited personal data through automated means such as website analytics, cookies, and server logs. This data is processed solely for website functionality, security, and performance optimisation.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access – You may request confirmation of whether we process your data and obtain a copy of it.
- Right to rectification – You may request correction of inaccurate or incomplete personal data.
- Right to erasure – You may request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to restriction of processing – You may request we limit how we use your data under certain conditions.
- Right to data portability – You may request your data in a structured, commonly used, and machine-readable format.
- Right to object – You may object to processing based on legitimate interests, including profiling and direct marketing.
- Right not to be subject to automated decision-making – We do not use automated decision-making or profiling.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.
How We Comply
Impact Tissue does not maintain a user database or store personal information collected through forms or registrations. We only use cookies and analytics tools (e.g., Google Analytics) to understand website traffic and improve user experience. All data is anonymised or aggregated where possible. We do not sell, share, or transfer personal data to third parties for commercial purposes.
Data We Process
Under UK GDPR, the personal data we may process includes:
- IP addresses (anonymised)
- Browser type and device information
- Pages visited and time spent on site
- Cookie identifiers (for session and preference management)
This data is collected automatically and is not linked to any identifiable individual unless voluntarily provided via a contact form.
Legal Basis for Processing
Our processing of personal data is based on the following legal grounds under UK GDPR:
- Legitimate interests – To ensure website security, improve user experience, and analyse traffic.
- Consent – For non-essential cookies, we obtain your consent via our cookie banner before placing them.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us at the email address below. Include your full name, the right you wish to exercise, and any relevant details (e.g., email used on the website). We will respond without undue delay.
Response Timeframes
We aim to respond to all requests within one month of receipt. If your request is complex or numerous, we may extend this period by up to two additional months and will inform you within one month of receipt.
No Discrimination Policy
We will not deny you goods or services, charge different prices, or provide a different level of service because you exercised your rights under UK GDPR.
Updates and Changes
We may update this page periodically to reflect changes in the law or our practices. The most recent version will always be available here, with the effective date clearly stated.
Contact Information
If you have any questions, requests, or complaints regarding your personal data under UK GDPR, please contact our data protection representative:
Sabrina Everhart
iEmail: [email protected]
Address: 45 Queen Street, Auckland CBD, Auckland 1010, New Zealand
For complaints, you may also contact the Information Commissioner’s Office at ico.org.uk.
