THIS CAN'T BE REAL LTD (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Notice explains how we may collect, use, store and protect personal data when you visit our website, and describes your rights under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, as amended from time to time.

Our website is intended to provide information about THIS CAN'T BE REAL LTD. We do not use cookies or similar technologies for tracking or analytics.

Although we do not actively request personal information through this website, limited technical information may be processed automatically when you access it.

For enquiries about the processing of personal data or to exercise your data protection rights, please visit our Contact Us page.

If requested, details of our organisation's contact for data protection will be provided.

We do not collect personal data directly from visitors through forms, account registration or similar website functionality.

However, when you visit our website, certain technical information may be processed automatically. This may include:

• Internet Protocol (IP) address;
• Date and time of the request;
• Requested webpage or resource;
• Browser type and version;
• Operating system and device information;

Where such information relates to an identifiable individual, it may constitute personal data under the UK GDPR.

We do not intentioally request special category personal data, such as information about health, religion or political opinions, through this website.

Where personal data is processed in connection with this website, we may use it for the following purposes:

• Website delivery: To transmit website content to your device and make the website available.
• Security and fraud prevention: To protect the website, investigate suspicious activity and prevent unauthorised access, malicious requests or other security incidents.
• Technical maintenance: To diagnose technical errors, maintain website performance and resolve operational issues.
• Legal compliance: To comply with applicable legal obligations and establish, exercise or defend legal claims where necessary.

We do not use this website to collect information through online forms, conduct behavioural advertising or carry out website visitor profiling.

Where personal data is processed in connection with the operation and security of this website, we rely on legitimate interests under Article 6(1)(f) of the UK GDPR, where applicable. These interests include maintaining website functionality, troubleshooting technical issues and protecting the website against security threats.

We consider the necessity of this processing and balance our legitimate interests against the rights and freedoms of individuals.

We do not use cookies on this website.

We do not use website cookies for analytics, advertising, behavioural tracking or personalisation.

If our use of cookies or similar technologies changes, we will review our obligations under the Privacy and Electronic Communications Regulations 2003 (“PECR”) and update our privacy information as necessary.

We do not sell visitors' personal data.

Where necessary for the operation and security of the website, limited personal data may be made available to:

• Website hosting providers: To deliver website content and maintain the hosting infrastructure.
• Public authorities and regulators: Where disclosure is required by law or is otherwise lawfully necessary.

We take appropriate steps to ensure that service providers processing personal data on our behalf meet applicable data protection requirements.

We will only share personal data where there is an appropriate legal basis and the disclosure is necessary for the relevant purpose.

If personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place in accordance with applicable data protection law.

We retain personal data only for as long as reasonably necessary for the purposes for which it is processed, including security, technical maintenance and compliance with applicable legal obligations.

Server logs and other technical records may be retained by our hosting provider or other service providers in accordance with their applicable retention arrangements and our instructions.

Retention periods will depend on the type of information, the purpose for which it is held, security requirements and any applicable legal obligations. Information will be deleted or anonymised when it is no longer required, where appropriate and technically practicable.

We take appropriate technical and organisational measures designed to protect personal data against accidental loss, destruction, damage, unauthorised access, alteration or disclosure.

These measures may include access controls, secure hosting arrangements, software updates, security monitoring and appropriate management of third-party service providers.

No method of transmission over the internet or electronic storage is completely secure. Although we take reasonable steps to protect personal data, we cannot guarantee absolute security.

Under the UK GDPR, you may have the following rights in relation to your personal data, subject to the applicable legal conditions and exemptions:

• Right of access: To request a copy of the personal data we hold about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of personal data in certain circumstances.
• Right to restriction: To request restriction of processing in certain circumstances.
• Right to data portability: To receive certain personal data in a structured, commonly used and machine-readable format, and to request its transmission to another controller where the legal conditions are met.
• Right to object: To object to processing based on legitimate interests or the performance of a task in the public interest, where applicable. We will stop the relevant processing unless we have compelling legitimate grounds to continue or another applicable legal basis permits it.
• Rights relating to automated decision-making: To benefit from applicable safeguards where decisions are made solely by automated processing and have legal or similarly significant effects.

These rights are not absolute and may not apply in every situation.

Where processing is based on consent, you also have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We do not charge a fee for handling ordinary data protection requests unless permitted by law.

To exercise your data protection rights, please contact us.

We may need to request additional information to verify your identity and ensure that personal data is disclosed only to the appropriate person.

We will respond to your request within the time limits required by applicable data protection law, normally within one month of receipt. This period may be extended where the law permits, including for complex or numerous requests.

If we are unable to comply with a request, we will explain the reasons where required by law and inform you of your available rights.

If you have concerns about how we process your personal data, please contact us in the first instance so that we can try to resolve them.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Information Commissioner's Office (ICO)
Website: https://ico.org.uk/
Telephone: 0303 123 1113

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, security or content of external websites. If you follow a link to another website, we recommend reviewing its privacy notice before providing any personal information.

The processing carried out by third-party websites is governed by their own policies and practices.

This website is not specifically directed at children, and we do not intentionally collect personal data from children.

We may update this Privacy Notice from time to time to reflect changes in our website, processing activities, service providers or legal obligations.

Any updated version will be published on this page.

We recommend reviewing this page periodically to remain informed about how we process personal data.

If you have any questions about this Privacy Notice or our handling of personal data, please contact us.