Data controller
Your data is controlled by the private, non-commercial operator of the site. You can get in touch through the site's contact form.
Lawful basis
Your data is used only to run the site and reply to your messages. The basis is legitimate interest under Article 6(1)(f) of the UK GDPR, and consent where needed under Article 6(1)(a). We never sell or rent your data.
Currency of this policy
This policy is updated when the law or the service changes. The version published here applies.
Data security
Data travels over an encrypted (HTTPS) connection, and access is limited to those who need it. Appropriate technical and organisational measures guard against loss, alteration or unauthorised disclosure.
Your rights
Under the UK GDPR and the Data Protection Act 2018, you can access, correct, erase, restrict or object to the use of your data, ask for portability, and withdraw consent at any time. Use the site's contact form to do so. If you are not satisfied, you can complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.
What is collected
We collect only what is needed to answer you: the name and email you give, an optional phone number, your message and technical data like your IP address. No special category data is requested.
Cookies
Only strictly necessary cookies are used. Under PECR, advertising or analytics cookies are set only with your consent, which you can withdraw at any time. You can also refuse cookies in your browser.
How long data is kept
We keep data only while needed and then delete it, save where a legal duty applies. Access logs are kept only for a short time.