Who is responsible for the processing
The controller for the personal data processed on this site is the private, non-commercial operator of the site. Under the UK GDPR and the Data Protection Act 2018, that individual decides how and why your data is processed. Contact is through the form on this site.
Complaints
If something about your data worries you, please raise it first through the site's contact form. You may also complain to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority, at ico.org.uk.
Data security
Data is sent over an encrypted (HTTPS) connection. Only those who need access have it, and suitable technical and organisational measures protect against loss, alteration or unauthorised access.
Changes to this policy
This policy is updated when the law or the service changes. The version published on this site is the one that applies.
Access data
When you visit the site, the server automatically records technical data such as your IP address, a timestamp, the page requested and your browser type. It keeps the service secure and is deleted after a short period.
Data we collect
Only the data needed to deal with your request is collected. No special category data, as defined by the UK GDPR, is requested.
- Your details: the name you provide.
- Contact details: an email address and, optionally, a telephone number.
- Location: the town or postcode you provide.
- Your message: what you tell us in your message.
- Connection data: IP address, date and time of the request.
Use of cookies
Only cookies needed for the site to work are used. Advertising or analytics cookies are set only with your consent, as required by PECR, which you can withdraw at any time. You can also refuse cookies through your browser settings.
Rights under the UK GDPR
The UK GDPR and the Data Protection Act 2018 give you the following rights:
- Right of access: obtain your data.
- Rectification: fix data that is wrong.
- Right to erasure: ask for your data to be deleted.
- Right to restriction: restrict processing.
- Objection: object to the processing.
- Portability: obtain your data in a portable form.
- Withdraw consent: whenever processing is based on consent.
Purposes of processing
The processing serves to provide the site, keep it secure and answer your messages. The lawful basis is legitimate interest in the secure operation of the site (Article 6(1)(f) of the UK GDPR), and, where required, your consent under Article 6(1)(a). We never sell or rent your data.
Data processors
Your data is not sold or passed on for marketing. Our host, 20i Limited, is bound as a processor under Article 28 of the UK GDPR, and does not use your data for its own purposes. Data is otherwise disclosed only where the law requires.
Overseas transfers
Your data stays within the United Kingdom and is not transferred abroad. Should such a transfer ever be needed, it would be protected by the safeguards required under Chapter V of the UK GDPR, such as an adequacy decision or an International Data Transfer Agreement.
Retention
Personal data is kept only for as long as it is needed for the purpose it was collected for. Server logs are deleted promptly and form data once the request is dealt with, save where the law requires it to be kept longer.