Data controller
The controller responsible for the personal data collected on this site is a private individual, outside any business activity.
Under the UK GDPR and the Data Protection Act 2018, the operator determines the means and purposes of the processing. Contact is through the form on this site.
Deletion
We keep personal data only for as long as it is needed for the purpose it was collected for, after which it is erased, unless a legal obligation requires it to be kept longer. Server logs are kept for a short period and then erased.
Log files
When you visit the site, the server keeps a technical record such as your IP address, the date and time, the page requested and your browser type. It supports the secure running of the site and is erased after a short time.
How cookies are used
Only cookies needed for the site to function are used. Under the Privacy and Electronic Communications Regulations (PECR), advertising or analytics cookies are set only with your consent, and you can withdraw that consent at any time. You can also refuse cookies through your browser settings.
Currency of this policy
This policy may be updated to reflect legal or technical changes. The version shown here is always the applicable one.
Exercising your rights
Under the UK GDPR and the Data Protection Act 2018, the following rights apply to your data:
- Right of access: ask for a copy of the data held about you.
- Rectification: have inaccurate or incomplete data corrected.
- Right to erasure: request the deletion of your data.
- Right to restriction: limit how your data is used.
- Right to object: object to how your data is used.
- Portability: obtain your data in a portable format.
- Withdraw consent: at any time, where processing relies on consent.
You can exercise these rights through the site's contact form. You also have the right to complain to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority, at ico.org.uk.
Purposes and lawful basis
Your data is used only to provide the site, keep it secure and reply to your enquiries. The basis is legitimate interest under Article 6(1)(f) of the UK GDPR, together with your consent where it is required (Article 6(1)(a)). Your data is never sold or rented to third parties.
Data security
Data is transmitted over an encrypted connection. Only those who need access have it, and suitable technical and organisational measures protect against loss, alteration or unauthorised access.
Categories of data
We collect only the data necessary to handle your request. Sensitive data is not collected.
- Your details: the name you provide.
- How to reach you: an email address and, optionally, a telephone number.
- Where you are: the town or postcode you provide.
- Your enquiry: what you tell us in your message.
- Technical data: IP address, date and time of the request.
Data processors
We do not sell your data and is not shared without a lawful basis. Our host, Kualo Limited, processes data only on our instructions under Article 28 of the UK GDPR, without using your data for its own ends.