Who is responsible
Your data is controlled by the private, non-commercial operator of the site. Contact is through the site's form.
Lawful basis
We use your data only to operate the site and respond to you. The basis is legitimate interest under Article 6(1)(f) of the UK GDPR, and consent where needed under Article 6(1)(a). We never sell or rent your data.
Security
Data travels over an encrypted (HTTPS) connection, and access is limited to those who need it. Appropriate technical and organisational measures guard against loss, alteration or unauthorised disclosure.
How long data is kept
We keep data only while needed and then delete it, save where a legal duty applies. Server logs are held briefly.
Changes
This policy is updated when the law or the service changes. The version published here applies.
Personal data
Only the data needed to reply is collected: your name, an email and, if you wish, a phone number, your message and technical data such as your IP address. No special category data is requested.
Cookies
The site uses only essential cookies. Under PECR, advertising or analytics cookies are set only with your consent, which you can withdraw at any time. Your browser settings also let you refuse cookies.
Your data protection rights
Under the UK GDPR and the Data Protection Act 2018, you can access, correct, erase, restrict or object to the use of your data, ask for portability, and withdraw consent at any time. Use the site's contact form to do so. You may also complain to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority, at ico.org.uk.