Who is responsible for the processing
The controller for the personal data processed on this site is the private individual who operates the site on a non-commercial basis. Under the UK GDPR and the Data Protection Act 2018, that individual decides how and why your data is processed. Contact is through the form on this site.
How long data is kept
Data is retained no longer than the purpose requires. Server logs are deleted promptly and form data once the request is dealt with, unless a legal obligation requires longer retention.
Changes to this policy
This policy is updated when the law or the service changes. The version published on this site is the one that applies.
Overseas transfers
Your data stays within the United Kingdom and is not transferred abroad. If a transfer were ever necessary, it would be covered by the safeguards in Chapter V of the UK GDPR, for example an adequacy decision or an International Data Transfer Agreement.
Purposes of processing
We process data to run the site securely and reply to your enquiries. The lawful basis is legitimate interest in the secure operation of the site (Article 6(1)(f) of the UK GDPR), and, where required, your consent under Article 6(1)(a). Your data is never sold or rented.
Data processors
Your data is neither sold nor shared for marketing. Our host, 20i Limited, is bound as a processor under Article 28 of the UK GDPR, without using your data for its own ends. Any other disclosure happens only where the law requires it.
How your data is protected
Data is sent over an encrypted (HTTPS) connection. Only those who need access have it, and suitable technical and organisational measures protect against loss, alteration or unauthorised access.
Cookies and local storage
This site sets only strictly necessary cookies. Advertising or analytics cookies are set only with your consent, as required by PECR, and you can withdraw that consent at any time. Your browser settings also let you refuse cookies.
Raising a concern
If you have a concern about how your data is handled, please contact us first through the site's contact form. You may also complain to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority, at ico.org.uk.
What data is collected
We collect only the data necessary to handle your request. No special category data, as defined by the UK GDPR, is requested.
- Your details: your first name and, where given, your surname.
- Contact details: your email address and, where you wish, a phone number.
- Area: a town or a postcode.
- Request: what you tell us in your message.
- Connection data: IP address, date and time of the request.
Log files
On each visit, technical data is logged automatically such as your IP address, a timestamp, the page requested and your browser type. It supports security and is erased after a short time.
Your rights
Under the UK GDPR and the Data Protection Act 2018, you have the following rights over your data:
- Access: obtain your data.
- Right to rectification: fix data that is wrong.
- Right to erasure: request deletion.
- Restriction: restrict processing.
- Objection: object to the processing.
- Portability: receive your data in a reusable format.
- Right to withdraw consent: at any time, where processing relies on consent.