Velvetencounter

Privacy policy

Everything that matters about data protection on this site.

Who is responsible for the processing

The controller for the personal data processed on this site is the private, non-commercial operator of the site. Under the UK GDPR and the Data Protection Act 2018, that individual decides how and why your data is processed. Contact is through the form on this site.

Overseas transfers

Your data stays within the United Kingdom and is not transferred abroad. If a transfer were ever necessary, it would be covered by the safeguards in Chapter V of the UK GDPR, for example an adequacy decision or an International Data Transfer Agreement.

How long data is kept

Personal data is kept only for as long as it is needed for the purpose it was collected for. Server logs are deleted promptly and form data once the request is dealt with, save where the law requires it to be kept longer.

Data processors

Your data is neither sold nor shared for marketing. Our host, Fasthosts Internet Limited, is bound as a processor under Article 28 of the UK GDPR, and does not use your data for its own purposes. Any other disclosure happens only where the law requires it.

Amendments

This policy is updated when the law or the service changes. The current version here is the one in force.

Purposes and lawful bases

The processing serves to provide the site, keep it secure and answer your messages. Processing rests on legitimate interest under Article 6(1)(f) of the UK GDPR, together with your consent where required (Article 6(1)(a)). We never sell or rent your data.

How your data is protected

Data is sent over an encrypted (HTTPS) connection. Only those who need access have it, and suitable technical and organisational measures protect against loss, alteration or unauthorised access.

Rights under the UK GDPR

The UK GDPR and the Data Protection Act 2018 give you the following rights:

  • Access: obtain your data.
  • Right to rectification: correct inaccurate or incomplete data.
  • Right to erasure: request deletion.
  • Right to restriction: restrict processing.
  • Objection: object to how your data is used.
  • Portability: obtain your data in a portable form.
  • Right to withdraw consent: at any time, where processing relies on consent.

Data we collect

Only the data needed to deal with your request is collected. Sensitive data is not collected.

  • Identity: your first name and, where given, your surname.
  • Contact details: an email address and, optionally, a telephone number.
  • Area: a town or a postcode.
  • Request: what you tell us in your message.
  • Technical data: IP address, date and time of the request.

Server logs

When you visit the site, the server automatically records technical data such as your IP address, a timestamp, the page requested and your browser type. It keeps the service secure and is deleted after a short period.

Cookies and local storage

This site sets only strictly necessary cookies. Under the Privacy and Electronic Communications Regulations (PECR), advertising or analytics cookies are set only with your consent, and you can withdraw that consent at any time. Your browser settings also let you refuse cookies.

Raising a concern

If something about your data worries you, please raise it first through the site's contact form. You may also complain to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority, at ico.org.uk.