• by Corbin Fairweather
• 0 Comments

UK GDPR Compliance

Holly Lets Property Hub is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights as a data subject, even though we do not collect personal information through registration or databases.

Scope and Applicability

The UK GDPR applies to the processing of personal data of individuals in the UK. While Holly Lets Property Hub does not require users to register or create accounts, we may collect limited, automatically generated data through website analytics, cookies, and server logs. This includes IP addresses, browser types, pages visited, and usage patterns. We process this data solely for website functionality, security, and statistical analysis.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

• Right of access: You may request confirmation of whether we hold any personal data about you.
• Right to rectification: You may request correction of any inaccurate personal data we hold.
• Right to erasure: You may request deletion of your personal data, where applicable.
• Right to restriction of processing: You may request we limit how we use your data.
• Right to data portability: You may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to our processing of your data based on legitimate interests.
• Right to withdraw consent: If consent was the legal basis, you may withdraw it at any time.

How We Comply

We do not store personal data in identifiable databases. Any data collected via cookies or analytics is anonymised or aggregated. We use only necessary cookies for site functionality and performance, with opt-out mechanisms available via your browser or our cookie banner. We do not sell, share, or disclose personal data to third parties for marketing purposes.

Data We Process

The personal data we may automatically collect includes:

• IP address (anonymised after 24 hours)
• Device type and browser information
• Pages viewed and time spent on site
• Cookie identifiers (for session and preference management)

This data is not linked to any individual identity and is retained only for as long as necessary.

Legal Basis for Processing

Our processing of personal data is based on legitimate interests under Article 6(1)(f) UK GDPR, specifically for:

• Ensuring website security and functionality
• Improving user experience through analytics
• Maintaining site performance and reliability

We conduct regular balancing tests to ensure our interests do not override your rights and freedoms.

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us directly via email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., IP address or date of visit if known). We will respond without undue delay and within one month.

Response Timeframes

We are required to respond to your request within one month of receipt. If your request is complex or numerous, we may extend this period by two further months, and we will inform you of any extension and the reasons for it.

No Discrimination Policy

We will not deny you services, charge you different prices, or provide a different level of service because you have exercised your rights under UK GDPR. Your rights are protected and respected without condition.

Updates and Changes

We may update this page periodically to reflect changes in law or our practices. Any material changes will be posted here with a revised effective date. We encourage you to review this page regularly.

Contact Information

If you have any questions, concerns, or requests regarding your data protection rights, please contact our Data Protection Contact:

Corbin Fairweather
Email: [email protected]
Address: Okahu Bay, 32 Watene Crescent, Ōrākei, Auckland 1071, New Zealand

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection: ico.org.uk.