Data Protection

Article 12 — Transparent Communication

We are committed to processing your personal data in a transparent, fair, and lawful manner. When we collect or process your personal data, we will:

• Provide clear, plain-language information about what data we collect and why
• Inform you of your rights regarding your personal data
• Respond to any requests you make regarding your data without undue delay, and at the latest within one calendar month
• Identify and verify your identity before processing any data subject access requests

If you have questions about how we process your data, please contact us at privacy@keepingrabbits.com.

Article 14 — Personal Data Collected from Third Parties

In some circumstances, we may collect personal data about you from third-party sources. These may include:

• Advertising partners: Google AdSense and other advertising networks may share certain data about your browsing behaviour on our site for ad targeting purposes
• Analytics providers: We use analytics services that may provide us with aggregated or anonymised data about site usage
• Affiliate partners: When you click affiliate links and make a purchase, our affiliate partners may share transaction information with us

Where we receive personal data from third parties, we will only use it for the purposes for which it was originally shared with us, or for purposes compatible with those original purposes. We will inform you of the source of any personal data collected about you at the time of collection or within a reasonable period.

Third-party data collection is subject to those parties' own privacy policies. We encourage you to review the privacy policies of any third-party services you interact with.

Article 18 — Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in the following circumstances:

• Contesting accuracy: When you believe the personal data we hold about you is inaccurate, you may request that we restrict processing while we verify its accuracy
• Unlawful processing: When processing is unlawful but you prefer to restrict it rather than request erasure
• Retention for legal claims: When we no longer need the data for the original purpose, but you require it for the establishment, exercise, or defence of legal claims
• Pending verification: When you have objected to processing pending verification of whether our legitimate interests override your rights

Where processing is restricted, your data will only be stored — not actively processed — until the restriction is lifted. We will notify you before lifting any restriction.

To request a restriction on processing, please contact us at privacy@keepingrabbits.com with the subject line "Restriction Request."

Article 21 — Right to Object

You have the right to object to the processing of your personal data at any time, in certain circumstances. Specifically:

• Legitimate interests: Where we process your data on the basis of legitimate interests or for tasks carried out in the public interest, you may object on grounds relating to your particular situation. We will then cease processing unless we can demonstrate compelling legitimate grounds that override your rights
• Direct marketing: You have an absolute right to object to processing for direct marketing purposes at any time. Unsubscribe links are included in all marketing emails, or you can email us at privacy@keepingrabbits.com
• Research and statistics: Where data is processed for research or statistical purposes, you may object subject to certain conditions

When you object to direct marketing, we must cease processing for those purposes without undue delay. For all other objections, we will respond to your request within one calendar month.

To submit an objection, please contact us at privacy@keepingrabbits.com with "Objection to Processing" in the subject line.

Article 77 — Right to Lodge a Complaint with a Supervisory Authority

If you believe that our processing of your personal data infringes your rights under the UK GDPR or EU GDPR, you have the right to lodge a complaint with a supervisory authority.

In the United Kingdom, the supervisory authority is the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Helpline: 0303 123 1113

If you are based in an EU member state, you can lodge a complaint with the data protection authority in your country. A list of EU supervisory authorities is available on the European Data Protection Board website.

Before contacting a supervisory authority, we encourage you to contact us first so we can attempt to resolve any concerns directly. You can reach us at privacy@keepingrabbits.com.