Who is responsible
The person responsible for your data is the private operator of the site, on a non-commercial basis. You can get in touch through the site's contact form.
Your rights
The UK GDPR and the Data Protection Act 2018 give you the right to obtain a copy of your data, correct or delete it, restrict or object to processing, ask for portability, and withdraw consent. These rights can be used through the contact form on this site. If you are not satisfied, you can complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.
Data processors
Your data is not sold and is not shared without a lawful basis. The host, Krystal Hosting Ltd, acts as a processor on our instructions under Article 28 of the UK GDPR.
Cookies
The site uses only strictly necessary cookies. Advertising or analytics cookies are set only with your consent under the Privacy and Electronic Communications Regulations (PECR), and you can withdraw it at any time. Your browser settings also let you refuse cookies.
Currency of this policy
This policy is updated when the law or the service changes. The version published here is the one that applies.
Purposes and lawful basis
We use your data only to operate the site and respond to you. The lawful basis is our legitimate interest in running the site securely (Article 6(1)(f) of the UK GDPR), and your consent where it is needed (Article 6(1)(a)). We never sell or rent your data.
Retention
Data is kept only as long as needed, then deleted, save where a legal duty applies. Access logs are kept only for a short time.
Server logs
On each visit, technical data is logged automatically, including IP address, timestamp and browser type. It keeps the service secure and is deleted after a short period.
Data we collect
We collect only what is needed to reply, and sensitive data is not requested: your name, an email address and, if you wish, a phone number, along with your message and basic technical data such as your IP address.