Who is responsible for the processing
The controller for the data processed at https://kissfling.uk is the private individual who operates the site on a non-commercial basis. That individual determines the means and purposes of processing under the UK GDPR and the Data Protection Act 2018. You can get in touch through the site's contact form.
Amendments
This policy is updated when the law or the service changes. The version published on this site is the one that applies.
How long data is kept
Personal data is kept only for as long as it is needed for the purpose it was collected for. Server logs are deleted promptly and form data once the request is dealt with, unless a legal obligation requires longer retention.
Purposes of processing
The processing serves to provide the site, keep it secure and answer your messages. Processing rests on legitimate interest under Article 6(1)(f) of the UK GDPR, together with your consent where required (Article 6(1)(a)). We never sell or rent your data.
Cookies and local storage
Only cookies needed for the site to work are used. Advertising or analytics cookies are set only with your consent, as required by PECR, which you can withdraw at any time. Your browser settings also let you refuse cookies.
Log files
On each visit, technical data is logged automatically including IP address, timestamp, the page requested and browser type. It supports security and is erased after a short time.
What data is collected
We collect only the data necessary to handle your request. No special category data, as defined by the UK GDPR, is requested.
- Identity: your first name and, where given, your surname.
- Contact details: an email address and, optionally, a telephone number.
- Area: a town or a postcode.
- Request: what you tell us in your message.
- Technical data: IP address, date and time of the request.
Security
Your data travels over a secure, encrypted (HTTPS) connection. Only those who need access have it, and appropriate technical and organisational measures guard against loss, alteration or unauthorised disclosure.
Data processors
Your data is not sold or passed on for marketing. The host, Fasthosts Internet Limited, acts as a processor on our instructions under Article 28 of the UK GDPR, and does not use your data for its own purposes. Any other disclosure happens only where the law requires it.
International transfers
Your data is not transferred outside the United Kingdom. If a transfer were ever necessary, it would be covered by the safeguards in Chapter V of the UK GDPR, for example an adequacy decision or an International Data Transfer Agreement.
Raising a concern
If something about your data worries you, please raise it first through the site's contact form. You may also complain to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority, at ico.org.uk.
Your rights
The UK GDPR and the Data Protection Act 2018 give you the following rights:
- Access: obtain your data.
- Right to rectification: fix data that is wrong.
- Right to erasure: request deletion.
- Restriction: limit how your data is used.
- Objection: object to the processing.
- Right to data portability: obtain your data in a portable form.
- Withdraw consent: at any time, where processing relies on consent.