Controller under the UK GDPR
The controller for the data processed at https://vixenencounter.uk is the private, non-commercial operator of the site. That individual determines the means and purposes of processing under the UK GDPR and the Data Protection Act 2018. You can get in touch through the site's contact form.
Cookies
Only cookies needed for the site to work are used. Advertising or analytics cookies are set only with your consent, as required by PECR, and you can withdraw that consent at any time. Your browser settings also let you refuse cookies.
Data we collect
We collect only the data necessary to handle your request. No special category data, as defined by the UK GDPR, is requested.
- Identity: your first name and, where given, your surname.
- Contact details: your email address and, where you wish, a phone number.
- Area: a town or a postcode.
- Your message: what you tell us in your message.
- Technical data: IP address, date and time of the request.
Amendments
This policy is updated when the law or the service changes. The current version here is the one in force.
Complaints
If something about your data worries you, please raise it first through the site's contact form. You may also complain to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority, at ico.org.uk.
Deletion
Data is retained no longer than the purpose requires. Access logs are erased shortly after collection, and form data once your enquiry is handled, unless a legal obligation requires longer retention.
Purposes of processing
The processing serves to provide the site, keep it secure and answer your messages. The lawful basis is legitimate interest in the secure operation of the site (Article 6(1)(f) of the UK GDPR), and, where required, your consent under Article 6(1)(a). Your data is never sold or rented.
Your rights
The UK GDPR and the Data Protection Act 2018 give you the following rights:
- Right of access: a copy of the data held about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask for your data to be deleted.
- Right to restriction: limit how your data is used.
- Right to object: object to the processing.
- Right to data portability: receive your data in a reusable format.
- Right to withdraw consent: whenever processing is based on consent.
Overseas transfers
Your data stays within the United Kingdom and is not transferred abroad. Should such a transfer ever be needed, it would be protected by the safeguards required under Chapter V of the UK GDPR, for example an adequacy decision or an International Data Transfer Agreement.
Data security
Your data travels over a secure, encrypted (HTTPS) connection. Only those who need access have it, and suitable technical and organisational measures protect against loss, alteration or unauthorised access.
Data processors
Your data is not sold or passed on for marketing. The host, Fasthosts Internet Limited, acts as a processor on our instructions under Article 28 of the UK GDPR, without using your data for its own ends. Any other disclosure happens only where the law requires it.
Log files
When you visit the site, the server automatically records technical data such as your IP address, a timestamp, the page requested and your browser type. It supports security and is erased after a short time.