Data controller
The controller for the data collected on this site is a private individual who runs it on a non-commercial basis. You can raise any question about your data through the site's contact form.
Data security
Data travels over an encrypted (HTTPS) connection. Only those who need access have it, and suitable measures protect against loss, alteration or unauthorised access.
Recipients
We do not sell your data or share it without a lawful basis. The host, Krystal Hosting Ltd, acts as a processor on our instructions under Article 28 of the UK GDPR.
Why your data is used
We use your data only to operate the site securely and respond to your messages. The lawful basis is our legitimate interest in the secure operation of the site (Article 6(1)(f) of the UK GDPR), and your consent where it is needed (Article 6(1)(a)). Your data is never sold or rented.
Cookies
The site uses only strictly necessary cookies. Advertising or analytics cookies are set only with your consent under the Privacy and Electronic Communications Regulations (PECR), and you can withdraw it at any time. You can also refuse cookies in your browser.
Personal data collected
Only the data needed to handle your request is collected, and no special category data is requested.
- Identity: the name you provide.
- Contact: your email and, if you wish, a phone number.
- Your message: the details you send in your message.
- Technical data: IP address, date and time of the request.
Changes
This policy is updated when the law or the service changes. The current version on this site is the one in force.
Your data protection rights
Under the UK GDPR and the Data Protection Act 2018, you can obtain a copy of your data, correct or delete it, restrict or object to processing, ask for portability, and withdraw consent. These rights can be used through the contact form on this site. If you are not satisfied, you can complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.
Retention
We keep your data only while it is needed and then delete it, save where a legal duty applies. Access logs are kept only for a short time.