UK GDPR Compliance

Karma Health Hub is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with these rights, even though we do not collect or store personal data through user registration or databases.

Scope and Applicability

The UK GDPR applies to the processing of personal data of individuals in the United Kingdom. While Karma Health Hub is operated from Australia, we use analytics tools and cookies that may collect limited personal data from visitors located in the UK. As such, we voluntarily adhere to UK GDPR standards to ensure consistent protection for all users.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

Right of access: You may request confirmation of whether we process any of your personal data.
Right to rectification: You may request correction of any inaccurate personal data.
Right to erasure: You may request deletion of your personal data, where applicable.
Right to restriction of processing: You may request we limit how your data is used.
Right to data portability: You may request a copy of your data in a structured, machine-readable format.
Right to object: You may object to our processing of your data based on legitimate interests.

How We Comply

Karma Health Hub does not maintain user accounts or store personal information in databases. We use third-party analytics services (such as Google Analytics) and cookies to understand website traffic and improve user experience. These tools collect anonymised or pseudonymised data, including IP addresses and browsing behaviour, which are processed in compliance with UK GDPR principles. We have implemented measures to minimise data collection and ensure lawful processing.

Data We Process

The only personal data we may process includes:

IP addresses (anonymised by our analytics tools)
Cookies and similar tracking technologies for site functionality and analytics
Browser type, device type, and pages visited

No names, email addresses, phone numbers, or other identifiable information are collected or stored.

Legal Basis for Processing

Our processing of personal data is based on legitimate interest — specifically, to improve website performance, ensure security, and enhance user experience. We do not use data for profiling or automated decision-making. We have conducted a Legitimate Interest Assessment (LIA) to confirm our processing is proportionate and minimally invasive.

How to Exercise Your Rights

To exercise any of your UK GDPR rights, please contact us at the email below. Include your full name, the right you wish to exercise, and any relevant details (e.g., IP address or cookie ID if known). We will respond without undue delay and within one month.

Response Timeframes

We are required to respond to your request within one month of receipt. In complex cases, we may extend this period by up to two additional months, and we will notify you if this occurs.

No Discrimination Policy

You will not be denied access to our services, charged different prices, or receive a different level of service because you exercised your rights under UK GDPR.

Updates and Changes

We may update this page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date.