Who is responsible
The controller for the purposes of the UK GDPR is the private individual who operates the site, acting in a personal, non-commercial capacity.
Under the UK GDPR and the Data Protection Act 2018, that individual decides how and why your data is processed. Contact is through the form on this site.
Storage period
We keep personal data no longer than the purpose requires, after which it is erased, unless a legal obligation requires it to be kept longer. Server logs are kept for a short period and then erased.
Changes to this policy
This policy can change if the law or the service changes. The version shown here is always the applicable one.
Server logs
On each visit, the server keeps a technical record such as your IP address, the date and time, the page requested and your browser type. It helps keep the service secure and is erased after a short time.
Personal data collected
No more data is collected than is needed for your request. No special category data, as defined by the UK GDPR, is requested.
- Your details: the name you choose to give.
- How to reach you: your email address and, where you wish, a phone number.
- Location: a town or a postcode.
- Your message: what you tell us in your message.
- Technical data: IP address and a timestamp.
Security
Data is transmitted over an encrypted connection. Access is restricted to the people who require it, and appropriate technical and organisational measures guard against loss, alteration or unauthorised disclosure.
Data processors
Your data is neither sold nor rented and is not disclosed without a lawful basis. Our host, Krystal Hosting Ltd, processes data only on our instructions as a processor under Article 28 of the UK GDPR, and does not use your data for its own purposes.
Your rights
Under UK data protection law, you have the following rights over your data:
- Right of access: obtain a copy of your data.
- Right to rectification: have inaccurate or incomplete data corrected.
- Erasure: request the deletion of your data.
- Restriction: ask us to restrict the processing.
- Objection: object to the processing of your data.
- Right to data portability: receive your data in a structured, reusable format.
- Withdraw consent: whenever processing is based on consent.
You can exercise these rights through the site's contact form. If you are not satisfied, you have the right to complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.
Purposes and lawful basis
The data is used solely to provide the site, keep it secure and reply to your enquiries. The lawful basis is our legitimate interest in operating the site securely (Article 6(1)(f) of the UK GDPR), and, where required, your consent under Article 6(1)(a). Your data is never sold or rented to third parties.
Use of cookies
Only cookies needed for the site to function are used. Under the Privacy and Electronic Communications Regulations (PECR), advertising or analytics cookies are set only with your consent, which you can withdraw at any time. Your browser settings also let you refuse cookies.