UK GDPR Compliance

At Harmony Financial Services, we are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with your rights under UK GDPR and the data processing activities that may apply to your use of our website.

Scope and Applicability

This compliance page applies to all visitors of alltherightnotes.co.uk, our informational blog and financial guidance website. Although we do not require user registration or maintain a database of personal information, we may collect limited personal data through automated means such as website analytics, server logs, and cookies.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of access: You may request confirmation of whether we process your personal data and receive a copy of that data.
  • Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
  • Right to erasure: You may request deletion of your personal data, subject to legal exceptions.
  • Right to restriction of processing: You may request we limit how we use your data under certain conditions.
  • Right to data portability: You may request your data in a structured, commonly used format where technically feasible.
  • Right to object: You may object to our processing of your data based on legitimate interests, including profiling or direct marketing.

How We Comply

Harmony Financial Services complies with UK GDPR by:

  • Only collecting data necessary for website functionality and analytics
  • Using cookies with user consent where required
  • Ensuring third-party service providers (e.g., analytics platforms) comply with UK GDPR
  • Not storing personal data longer than necessary
  • Maintaining technical and organisational measures to protect data security

Data We Process

The personal data we may process includes:

  • IP addresses (anonymised where possible)
  • Browser type and device information
  • Pages visited and time spent on site
  • Cookie identifiers for analytics purposes

This data is collected automatically and is not linked to any individually identifiable information unless voluntarily provided through a contact form.

Legal Basis for Processing

We process personal data under the legal basis of legitimate interest for website functionality, security, and analytics. We do not rely on consent for essential website operations, but we do obtain consent for non-essential cookies in line with the Privacy and Electronic Communications Regulations (PECR).

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us at:

[email protected]

Please include your full name, the right you wish to exercise, and any relevant details (e.g., email address or IP address if known). We will respond without undue delay and in any case within one month of receipt.

Response Timeframes

We are required by UK GDPR to respond to your request within one month. In complex cases, we may extend this period by two further months, and we will inform you of any delay and the reasons for it.

No Discrimination Policy

We will not deny you services, charge different prices, or provide a different quality of service because you exercised your rights under UK GDPR.

Updates and Changes

We may update this page periodically to reflect changes in the law or our practices. Any material changes will be posted on this page with an updated effective date.

Contact Information

If you have any questions about this UK GDPR compliance page or wish to exercise your rights, please contact our data protection contact:

Evelyn Waterstone
15 Esplanade Road, Scarborough NSW 2069, Australia
Email: [email protected]

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.