Who is responsible for the processing
The controller for the data processed at https://cravespark.uk is the private individual who operates the site on a non-commercial basis. That individual determines the means and purposes of processing under the UK GDPR and the Data Protection Act 2018. Contact is through the form on this site.
Data security
Your data travels over a secure, encrypted (HTTPS) connection. Only those who need access have it, and suitable technical and organisational measures protect against loss, alteration or unauthorised access.
International transfers
Your data is not transferred outside the United Kingdom. Should such a transfer ever be needed, it would be protected by the safeguards required under Chapter V of the UK GDPR, such as an adequacy decision or an International Data Transfer Agreement.
Who processes your data
Your data is not sold or passed on for marketing. The host, Fasthosts Internet Limited, acts as a processor on our instructions under Article 28 of the UK GDPR, without using your data for its own ends. Any other disclosure happens only where the law requires it.
Personal data collected
We collect only the data necessary to handle your request. Sensitive data is not collected.
- Your details: the name you provide.
- Contact details: an email address and, optionally, a telephone number.
- Area: a town or a postcode.
- Your message: what you tell us in your message.
- Connection data: IP address, date and time of the request.
Complaints
If you have a concern about how your data is handled, please contact us first through the site's contact form. You also have the right to complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.
Changes to this policy
We revise this policy if the law or the service changes. The version published on this site is the one that applies.
How long data is kept
Personal data is kept only for as long as it is needed for the purpose it was collected for. Access logs are erased shortly after collection, and form data once your enquiry is handled, save where the law requires it to be kept longer.
Purposes of processing
We process data to run the site securely and reply to your enquiries. Processing rests on legitimate interest under Article 6(1)(f) of the UK GDPR, and, where required, your consent under Article 6(1)(a). We never sell or rent your data.
Log files
When you visit the site, the server automatically records technical data including IP address, timestamp, the page requested and browser type. It supports security and is erased after a short time.
Use of cookies
Only cookies needed for the site to work are used. Advertising or analytics cookies are set only with your consent, as required by PECR, and you can withdraw that consent at any time. Your browser settings also let you refuse cookies.
Rights under the UK GDPR
Under the UK GDPR and the Data Protection Act 2018, you have the following rights over your data:
- Access: a copy of the data held about you.
- Right to rectification: fix data that is wrong.
- Erasure: ask for your data to be deleted.
- Right to restriction: limit how your data is used.
- Right to object: object to how your data is used.
- Right to data portability: receive your data in a reusable format.
- Withdraw consent: whenever processing is based on consent.