Controller
The person responsible for your data is the private operator of the site, on a non-commercial basis. You can get in touch through the site's contact form.
Your data protection rights
The UK GDPR and the Data Protection Act 2018 give you the right to obtain a copy of your data, correct or delete it, restrict or object to processing, ask for portability, and withdraw consent. You can exercise these rights through the site's contact form. If you are not satisfied, you can complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.
How long data is kept
We keep data only while it is needed and then delete it, unless the law requires it to be kept longer. Server logs are held briefly and then erased.
Cookie notice
The site uses only strictly necessary cookies. Advertising or analytics cookies are set only with your consent under the Privacy and Electronic Communications Regulations (PECR), and you can withdraw it at any time. Your browser settings also let you refuse cookies.
Lawful basis
Your data is used only to run the site and reply to your messages. The basis is legitimate interest under Article 6(1)(f) of the UK GDPR, together with your consent where required (Article 6(1)(a)). We never sell or rent your data.
Currency of this policy
This policy is updated when the law or the service changes. The version published here is the one that applies.
Data processors
Your data is not sold and is not shared without a lawful basis. Our host, 20i Limited, is a processor acting on our instructions under Article 28 of the UK GDPR.
What data is collected
Only the data needed to answer you is collected, and sensitive data is not requested: your name, an email address and, if you wish, a phone number, along with your message and basic technical data such as your IP address.
Server logs
On each visit, technical data is logged automatically, such as your IP address, a timestamp and your browser type. It supports security and is erased after a short time.