UK GDPR Compliance

Castle Park Bowling Paradise is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how your rights are upheld under this law, even though we do not store personal data through registration or databases.

Scope and Applicability

The UK GDPR applies to the processing of personal data of individuals in the UK. While Castle Park Bowling Paradise does not collect personal information via user accounts or forms, we may automatically collect limited data through website analytics, server logs, and cookies to improve user experience and site functionality. This data is processed solely for legitimate business interests, as permitted under UK GDPR.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

Right of access – to know what personal data we hold about you
Right to rectification – to correct any inaccurate data
Right to erasure – to request deletion of your data
Right to restrict processing – to limit how your data is used
Right to data portability – to receive your data in a structured format
Right to object – to object to processing based on legitimate interest
Right to withdraw consent – where consent was the legal basis

How We Comply

We do not maintain a database of personal information. Any data collected automatically (e.g., IP addresses, browser type, cookie identifiers) is anonymised where possible, retained only for as long as necessary, and never linked to identifiable individuals without explicit consent. We use secure, compliant analytics tools and ensure all third-party services adhere to UK GDPR standards.

Data We Process

The only personal data we may process includes:

IP addresses (anonymised via IP masking)
Cookie identifiers for site functionality
Server log data (date/time of visits, pages viewed)

This data is not used to identify individuals and is not stored beyond 30 days.

Legal Basis for Processing

Our processing of personal data is based on legitimate interest under Article 6(1)(f) UK GDPR, specifically to:

Ensure website security and performance
Analyse traffic to improve user experience
Maintain compliance with legal obligations

We do not process special categories of data (e.g., health, race, religion).

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us via email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., date of visit, browser used). We will respond without undue delay.

Response Timeframes

We are required to respond to your request within one month of receipt. In complex cases, this may be extended by two further months, and we will inform you of any delay and the reasons.

No Discrimination Policy

You will not be denied services, charged different prices, or receive a lower quality of experience for exercising your rights under UK GDPR.

Updates and Changes

We may update this page periodically to reflect changes in law or our practices. The latest version will always be posted here with an updated effective date.

Contact Information

For any questions, requests, or complaints regarding your data rights under UK GDPR, please contact:

Jasper Ellington
100 Harris St, Pyrmont, NSW 2009, Australia
[email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK’s supervisory authority for data protection: ico.org.uk.