Controller
The controller for the data collected on this site is a private individual who runs it on a non-commercial basis. For any question about your data, a contact form is available on the site.
Currency of this policy
This policy is updated when the law or the service changes. The version published here is the one that applies.
Who has access
Your data is not sold and is not shared without a lawful basis. The host, Krystal Hosting Ltd, acts as a processor on our instructions under Article 28 of the UK GDPR.
Lawful basis
Your data is used only to run the site, keep it secure and reply to you. The basis is legitimate interest under Article 6(1)(f) of the UK GDPR, together with your consent where required (Article 6(1)(a)). Your data is never sold or rented.
Security
Data travels over an encrypted (HTTPS) connection. Only those who need access have it, and appropriate technical and organisational measures guard against loss, alteration or unauthorised disclosure.
Use of cookies
The site uses only strictly necessary cookies. Under PECR, advertising or analytics cookies are set only with your consent, which you can withdraw at any time. You can also refuse cookies in your browser.
How long data is kept
Your data is kept only as long as needed for the purpose, then deleted, save where a legal duty applies. Access logs are kept only for a short time.
Your rights
The UK GDPR and the Data Protection Act 2018 let you access your data, have it corrected or erased, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. These rights can be used through the contact form on this site. If you are not satisfied, you can complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.
Data we collect
We collect only what is needed to deal with your request, and no special category data is requested.
- Your details: the name you choose to give.
- Contact: an email address and an optional phone number.
- Request: the details you send in your message.
- Technical data: IP address, date and time of the request.