UK GDPR Compliance
Concept Showcase is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with these rights, even though we do not collect personal data through registration or databases.
Scope and Applicability
The UK GDPR applies to the processing of personal data of individuals in the United Kingdom. While Concept Showcase does not require users to register or store personal information in a database, we may automatically collect limited data through website analytics and server logs, such as IP addresses, browser type, and browsing behaviour, solely for improving user experience and site performance.
Your Rights Under UK GDPR
Regardless of the limited nature of our data processing, you retain the following rights under UK GDPR:
- Right of access – You may request confirmation of whether we process any of your personal data.
- Right to rectification – You may request correction of inaccurate data.
- Right to erasure – You may request deletion of your data where applicable.
- Right to restriction of processing – You may request limitations on how your data is used.
- Right to data portability – You may request a copy of your data in a structured, machine-readable format.
- Right to object – You may object to processing based on legitimate interest, including analytics.
How We Comply
Concept Showcase does not store personal data in identifiable databases. Any data collected via analytics tools (e.g., Google Analytics) is processed anonymously and aggregated. We do not use cookies for tracking or advertising purposes beyond essential site functionality. We maintain server logs for security and performance, and these are automatically anonymised and deleted after 30 days.
Data We Process
The only personal data we may process includes:
- IP addresses (anonymised immediately after collection)
- Browser and device information (for technical diagnostics)
- Pages visited and session duration (aggregated, not attributed to individuals)
Legal Basis for Processing
Our processing is based on legitimate interest under Article 6(1)(f) UK GDPR, specifically to ensure the website functions correctly, improves performance, and provides a better user experience. We have conducted a Legitimate Interest Assessment and determined that our processing is minimal, non-intrusive, and outweighs any potential impact on your privacy.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., IP address or date of visit if known). We will respond without undue delay.
Response Timeframes
We are required to respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months and will notify you if this is necessary.
No Discrimination Policy
You will not be denied access to any content, services, or features of Concept Showcase because you have exercised your rights under UK GDPR. We do not penalise users for requesting access, deletion, or opting out of analytics.
Updates and Changes
We may update this page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date.
Contact Information
If you have questions about this compliance page or wish to raise a concern, please contact our data protection point of contact:
Dorian Ashwell
1601 Bayshore Dr, Vancouver, BC V6G 2V4, Canada
[email protected]
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection: ico.org.uk.
