Who is responsible
The controller for the data on this site is a private individual who runs it with no commercial aim. Contact is through the form on this site.
Log files
When you visit the site, the server automatically records technical data, such as your IP address, a timestamp and your browser type. It supports security and is erased after a short time.
Data security
Data travels over an encrypted (HTTPS) connection. Access is limited to those who need it, and appropriate technical and organisational measures guard against loss, alteration or unauthorised disclosure.
Why your data is used
Your data is used only to run the site, keep it secure and reply to you. The basis is legitimate interest under Article 6(1)(f) of the UK GDPR, and your consent where needed under Article 6(1)(a). Your data is never sold or rented.
Updates
We update this policy if the law or the service changes. The version published here is the one that applies.
Cookies
Only cookies needed to run the site are used. Advertising or analytics cookies are set only with your consent under the Privacy and Electronic Communications Regulations (PECR), and you can withdraw it at any time. Your browser settings also let you refuse cookies.
How long data is kept
We keep data only while it is needed and then delete it, unless the law requires it to be kept longer. Server logs are held briefly and then erased.
Your data protection rights
The UK GDPR and the Data Protection Act 2018 let you obtain a copy of your data, correct or delete it, restrict or object to processing, ask for portability, and withdraw consent. You can exercise these rights through the site's contact form. You may also complain to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority, at ico.org.uk.
Personal data
We collect only what is needed to answer you, and no special category data is requested: your name, an email address and, if you wish, a phone number, plus your message and technical data such as your IP address.
Data processors
Your data is not sold and is not shared without a lawful basis. The host, 20i Limited, acts as a processor on our instructions under Article 28 of the UK GDPR.