Privacy Policy
Last updated: 6 May 2026Bank Holidays UK (“we”, “us”) respects your privacy. This page explains what data we collect when you visit bank-holidays-uk.co.uk, why, and what your rights are under UK GDPR and the Data Protection Act 2018.
1. Who we are
Bank Holidays UK is an independent editorial site publishing reference information about UK bank holidays, regional dates, and pay/rights guidance. We are not affiliated with any UK government department.
Editorial contact: /contact/.
2. What data we collect
2.1 Information you give us
When you fill in a form on our contact page, we collect the name, email address and the content of your message. We use this only to reply to you.
2.2 Information collected automatically
Like most websites, we receive technical data when you visit, including:
- IP address (truncated where possible)
- Browser type and version
- Pages visited, time and date of visit, time spent on pages
- Referring URL
This data is processed by our hosting provider (Infomaniak Network SA, Switzerland) and our CDN (Cloudflare, Inc., USA — under the EU-US Data Privacy Framework).
3. Cookies
We use a minimal set of cookies:
- Strictly necessary cookies — set by WordPress to remember preferences and prevent abuse. These do not require consent.
- Analytics cookies — if and when we enable Google Analytics 4 (with IP anonymisation). You will be asked for consent via a banner before any analytics cookie is set.
You can clear cookies at any time via your browser settings.
4. Legal basis for processing
Under UK GDPR Article 6, we rely on:
- Legitimate interest — to operate the site, serve content, prevent fraud and malicious traffic.
- Consent — for any analytics or advertising cookies, where applicable.
- Contract — when you contact us with a query.
5. How long we keep data
- Contact form submissions: up to 24 months, then deleted.
- Server access logs: 30 days.
- Cloudflare analytics: 30 days at edge.
6. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data (“right to erasure”)
- Object to processing or restrict it
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO) — ico.org.uk/make-a-complaint
To exercise any of these rights, write to us via the contact page.
7. Third parties
We share data only with the following processors, each of whom has signed appropriate data processing agreements:
- Infomaniak Network SA — web hosting (Switzerland)
- Cloudflare, Inc. — CDN and DDoS protection (USA)
- Google LLC — Search Console, optionally Analytics (USA, with EU-US DPF)
We do not sell or rent your data to anyone.
8. Children
Our site is not directed at children under 13 and we do not knowingly collect data from them.
9. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top reflects the latest revision.
10. Contact
For any privacy question, see the contact page.