Data controller
The controller for the data collected at https://sultryspark.uk is the private operator of the site, acting on a non-commercial basis. Under the UK GDPR and the Data Protection Act 2018, that individual decides how and why your data is processed. Contact is through the site's form.
Your data protection rights
The UK GDPR and the Data Protection Act 2018 give you the following rights:
- Right of access: a copy of the data held about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask for your data to be deleted.
- Right to restriction: restrict processing.
- Right to object: object to the processing.
- Portability: obtain your data in a portable form.
- Withdraw consent: at any time, where processing relies on consent.
These rights can be exercised through the site's contact form. You may also complain to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority, at ico.org.uk.
Changes to this policy
We revise this policy if the law or the service changes. The current version here is the one in force.
Data we collect
Only the data needed to deal with your request is collected, and no sensitive data is requested: your name, an email address and, if you wish, a phone number, your message and technical data such as your IP address and a timestamp.
Cookies
This site uses only strictly necessary cookies. Advertising or analytics cookies are set only with your consent, as required by PECR, which you can withdraw at any time. Your browser settings also let you refuse cookies.
Deletion
Personal data is kept only for as long as it is needed for the purpose, then deleted, unless a legal obligation requires longer retention. Access logs are kept only for a short time.
Purposes and lawful basis
We process data only to operate the site securely and respond to your messages. Processing rests on legitimate interest under Article 6(1)(f) of the UK GDPR, together with your consent where required (Article 6(1)(a)). Your data is never sold or rented.