Data controller
The controller for the personal data processed on this site is the private, non-commercial operator. You can get in touch through the site's contact form.
Updates
This policy is updated when the law or the service changes. The version published on this site is the one that applies.
Personal data collected
We collect only the data necessary to handle your request. Sensitive data is not collected.
- Identity: your first name and, where given, your surname.
- Contact details: your email address and, where you wish, a phone number.
- Location: a town or a postcode.
- Your message: what you tell us in your message.
- Connection data: IP address, date and time of the request.
Purposes and lawful bases
The processing serves to provide the site, keep it secure and answer your messages. The lawful basis is legitimate interest in the secure operation of the site (Article 6(1)(f) of the UK GDPR), and, where required, your consent under Article 6(1)(a).
Your rights
Under the UK GDPR and the Data Protection Act 2018, you have the following rights over your data:
- Right of access: a copy of the data held about you.
- Right to rectification: fix data that is wrong.
- Right to erasure: request deletion.
- Restriction: limit how your data is used.
- Right to object: object to the processing.
- Right to data portability: obtain your data in a portable form.
- Withdraw consent: whenever processing is based on consent.
You can use these rights through the contact form on this site. You may also complain to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority, at ico.org.uk.
Overseas transfers
Your data stays within the United Kingdom and is not transferred abroad. If a transfer were ever necessary, it would be covered by the safeguards in Chapter V of the UK GDPR, such as an adequacy decision or an International Data Transfer Agreement.
Deletion
Personal data is kept only for as long as it is needed for the purpose it was collected for. Server logs are deleted promptly and form data once the request is dealt with, unless a legal obligation requires longer retention.
Cookies and local storage
Only cookies needed for the site to work are used. Under the Privacy and Electronic Communications Regulations (PECR), advertising or analytics cookies are set only with your consent, which you can withdraw at any time. You can also refuse cookies through your browser settings.
Who processes your data
Your data is neither sold nor shared for marketing. The host, Kualo Limited, acts as a processor on our instructions under Article 28 of the UK GDPR, without using your data for its own ends.