Controller under the UK GDPR
The controller for the personal data processed on this site is a private individual who runs the site on a non-commercial basis. You can get in touch through the site's contact form.
Purposes of processing
We process data to provide the site, keep it secure and reply to you. Processing rests on legitimate interest under Article 6(1)(f) of the UK GDPR, and, where required, your consent under Article 6(1)(a).
Server logs
When you visit the site, the server automatically records technical data including IP address, timestamp, the page requested and browser type. It supports security and is erased after a short time.
Cookies
This site sets only strictly necessary cookies. Under the Privacy and Electronic Communications Regulations (PECR), advertising or analytics cookies are set only with your consent, which you can withdraw at any time. Your browser settings also let you refuse cookies.
Changes to this policy
We revise this policy if the law or the service changes. The current version here is the one in force.
Complaints
If you have a concern about how your data is handled, please contact us first through the site's contact form. You also have the right to complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.
How long data is kept
Personal data is kept only for as long as it is needed for the purpose it was collected for. Server logs are deleted promptly and form data once the request is handled, unless a legal obligation requires longer retention.
Data processors
Your data is not sold or passed on for marketing. The host, Krystal Hosting Ltd, acts as a processor on our instructions under Article 28 of the UK GDPR. Any other disclosure happens only where the law requires it.
Where your data is held
Your data stays within the United Kingdom and is not transferred abroad. If a transfer were ever necessary, it would be covered by the safeguards in Chapter V of the UK GDPR, such as an adequacy decision or an International Data Transfer Agreement.
Your rights
The UK GDPR and the Data Protection Act 2018 give you the following rights:
- Access: a copy of the data held about you.
- Rectification: fix data that is wrong.
- Right to erasure: ask for your data to be deleted.
- Right to restriction: limit how your data is used.
- Objection: object to how your data is used.
- Portability: obtain your data in a portable form.
- Withdraw consent: at any time, where processing relies on consent.