UK GDPR Compliance

Spam Energy is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights as a data subject, even though we do not collect personal data through registration or databases.

Scope and Applicability

The UK GDPR applies to the processing of personal data of individuals in the United Kingdom. While Spam Energy does not require users to register or store personal information in a database, we may automatically collect limited data through website analytics, cookies, and server logs for operational and security purposes. This page outlines how we handle such data in compliance with UK GDPR.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

  • Right of access: You may request confirmation of whether we hold any of your personal data.
  • Right to rectification: You may request correction of any inaccurate personal data we hold.
  • Right to erasure: You may request deletion of your personal data where there is no compelling reason for its continued processing.
  • Right to restrict processing: You may request we limit how we use your data under certain conditions.
  • Right to data portability: You may request a copy of your data in a structured, commonly used format.
  • Right to object: You may object to our processing of your data based on legitimate interests.
  • Right to withdraw consent: Where consent is the legal basis, you may withdraw it at any time.

How We Comply

Spam Energy complies with UK GDPR by:

  • Using only necessary cookies with prior consent via a clear banner
  • Minimising data collection to essential analytics (e.g., IP anonymisation, aggregated traffic data)
  • Ensuring all third-party services (e.g., Google Analytics) are GDPR-compliant and contractually bound
  • Not storing any personal data beyond what is strictly required for website functionality
  • Regularly reviewing our data handling practices

Data We Process

Any personal data we process is limited to:

  • Anonymous IP addresses (automatically anonymised)
  • Browser type and device information
  • Pages visited and time spent on site
  • Cookie identifiers for session and preference tracking

No names, email addresses, phone numbers, or other directly identifiable information are collected or stored.

Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

  • Legitimate interests: For website functionality, security, and analytics to improve user experience
  • Consent: For non-essential cookies and tracking technologies

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us at:

[email protected]

Include your name, the right you wish to exercise, and any relevant details. We will respond without undue delay and within one month of receipt.

Response Timeframes

We aim to respond to all requests within one calendar month. If your request is complex or numerous, we may extend this period by a further two months and will inform you within one month of receipt.

No Discrimination Policy

We will not deny you access to our content, charge you different prices, or provide a different level of service because you exercised your UK GDPR rights.

Updates and Changes

We may update this page from time to time to reflect changes in law or our practices. The latest version will always be posted here with an updated effective date.

Contact Information

If you have any questions about this compliance page or wish to raise a concern, please contact:

Amelia Starling
123 Albert Street, Brisbane City QLD 4000, Australia
Email: [email protected]

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.