UK GDPR Compliance
At Scarlet Society, we are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights under UK GDPR and the data processing activities that may affect you as a visitor to our website.
Scope and Applicability
Although Scarlet Society does not collect personal data through user registration or account creation, we may automatically process limited personal data via website analytics, cookies, and server logs. This includes IP addresses, browser types, and usage patterns. These processing activities fall within the scope of UK GDPR, and we ensure full compliance with its requirements.
Your Rights Under UK GDPR
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access – You may request confirmation of whether we process your personal data and obtain a copy of it.
- Right to rectification – You may request correction of any inaccurate or incomplete personal data we hold about you.
- Right to erasure – You may request deletion of your personal data, subject to legal exceptions.
- Right to restriction of processing – You may request we limit how we use your data under certain conditions.
- Right to data portability – You may request your data in a structured, commonly used format.
- Right to object – You may object to our processing of your data based on legitimate interests, including profiling and direct marketing.
- Right to withdraw consent – Where we rely on your consent, you may withdraw it at any time.
How We Comply
We have implemented technical and organisational measures to ensure data protection by design and by default. Our website uses minimal, anonymised tracking tools that do not identify individuals directly. We do not store personal data in databases or retain logs beyond what is necessary for security and analytics. All third-party services we use (e.g., Google Analytics) are selected for their GDPR compliance and data processing agreements.
Data We Process
The personal data we may process includes:
- IP addresses (anonymised where possible)
- Browser and device information
- Pages visited and time spent on site
- Cookies and similar tracking technologies (with user consent where required)
This data is processed solely for the purpose of improving website functionality, understanding audience engagement, and ensuring site security.
Legal Basis for Processing
We rely on the legal basis of legitimate interests under Article 6(1)(f) UK GDPR to process data for website analytics and security. We balance these interests against your rights and freedoms, and we only process data that is minimal and necessary. Where consent is required (e.g., non-essential cookies), we obtain it via our cookie banner.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us at the email address below. Include your full name, the right you wish to exercise, and any relevant details (e.g., email address used to visit our site). We will respond without undue delay and in all cases within one month.
Response Timeframes
We are required by UK GDPR to respond to your requests within one month of receipt. In complex cases, we may extend this period by up to two additional months and will inform you of any delay and the reasons for it.
No Discrimination Policy
We will not deny you access to our content, charge you different prices, or provide a different quality of service because you have exercised your rights under UK GDPR.
Updates and Changes
We may update this page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date. We recommend reviewing this page regularly.
Contact Information
If you have any questions about this compliance page or wish to exercise your rights, please contact our data protection point of contact:
Fiona Abernathy
Email: [email protected]
Address: 200 Exhibition St, Melbourne VIC 3000, Australia
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection: ico.org.uk.
