Controller
Your data is controlled by the private, non-commercial operator of this site. You can raise any question about your data through the site's contact form.
Changes
This policy is updated when the law or the service changes. The version published here is the one that applies.
Lawful basis
Your data is used only to run the site, keep it secure and reply to you. The basis is legitimate interest under Article 6(1)(f) of the UK GDPR, and consent where needed under Article 6(1)(a). We never sell or rent your data.
Cookies
The site uses only strictly necessary cookies. Under PECR, advertising or analytics cookies are set only with your consent, which you can withdraw at any time. You can also refuse cookies in your browser.
Data security
Your data is sent over a secure, encrypted (HTTPS) connection. Access is limited to those who need it, and appropriate technical and organisational measures guard against loss, alteration or unauthorised disclosure.
Data processors
We do not sell your data or share it without a lawful basis. Our host, 20i Limited, is a processor under Article 28 of the UK GDPR.
Rights under the UK GDPR
Under the UK GDPR and the Data Protection Act 2018, you can access your data, have it corrected or erased, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. These rights can be used through the contact form on this site. If you are not satisfied, you can complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.
Log files
On each visit, technical data is logged automatically including IP address, timestamp and browser type. It keeps the service secure and is deleted after a short period.
Retention
Your data is kept only as long as needed for the purpose, then deleted, save where a legal duty applies. Server logs are held briefly and then erased.