Sultryfling

Data protection and your rights

What we collect, why, and how it is protected.

Data controller

Your data is controlled by the private, non-commercial operator of the site. Contact is through the form on this site.

Lawful basis

We use your data only to operate the site securely and respond to your messages. The basis is legitimate interest under Article 6(1)(f) of the UK GDPR, and your consent where needed under Article 6(1)(a). We never sell or rent your data.

Data security

Your data is sent over a secure, encrypted (HTTPS) connection. Access is limited to those who need it, and appropriate technical and organisational measures guard against loss, alteration or unauthorised disclosure.

Your data protection rights

Under the UK GDPR and the Data Protection Act 2018, you can access your data, have it corrected or erased, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. These rights can be used through the contact form on this site. If you are not satisfied, you can complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.

Currency of this policy

We update this policy if the law or the service changes. The version published here is the one that applies.

Cookies

Only cookies needed to run the site are used. Advertising or analytics cookies are set only with your consent under the Privacy and Electronic Communications Regulations (PECR), and you can withdraw it at any time. Your browser settings also let you refuse cookies.

Personal data

Only the data needed to reply to you is collected, and no special category data is requested: your name, an email address and, if you wish, a phone number, plus your message and technical data such as your IP address.

Access data

On each visit, technical data is logged automatically, such as your IP address, a timestamp and your browser type. It keeps the service secure and is deleted after a short period.

Data processors

Your data is not sold and is not shared without a lawful basis. Our host, Krystal Hosting Ltd, is a processor under Article 28 of the UK GDPR.

How long data is kept

We keep data only while it is needed and then delete it, unless the law requires it to be kept longer. Access logs are kept only for a short time.