Controller under the UK GDPR
The controller for the data processed at https://naughtyscotland.uk is the private, non-commercial operator of the site. Contact is available through the form on this site.
International transfers
Your data is not transferred outside the United Kingdom. If a transfer were ever necessary, it would be covered by the safeguards in Chapter V of the UK GDPR, for example an adequacy decision or an International Data Transfer Agreement.
Retention
Personal data is kept only for as long as it is needed for the purpose it was collected for. Server logs are deleted promptly and form data once the request is handled, save where the law requires it to be kept longer.
Data processors
Your data is neither sold nor shared with third parties for marketing. Our host, Krystal Hosting Ltd, is a processor under Article 28 of the UK GDPR. Any other disclosure happens only where the law requires it.
Log files
On each visit, the server logs technical data automatically such as your IP address, the date and time, the page requested and your browser type. This keeps the service secure and is deleted after a short period.
Cookies and local storage
Only cookies needed for the site to work are used. Advertising or analytics cookies are set only with your consent, as required by PECR, which you can withdraw at any time. Your browser settings also let you refuse cookies.
Rights under the UK GDPR
The UK GDPR and the Data Protection Act 2018 give you the following rights:
- Right of access: a copy of the data held about you.
- Right to rectification: fix data that is wrong.
- Erasure: ask for your data to be deleted.
- Restriction: limit how your data is used.
- Objection: object to the processing.
- Portability: obtain your data in a portable form.
- Withdraw consent: whenever processing is based on consent.
Complaints
If you have a concern about how your data is handled, please contact us first through the site's contact form. You may also complain to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority, at ico.org.uk.
Purposes and lawful bases
We process data to provide the site, keep it secure and reply to you. The lawful basis is our legitimate interest in the secure operation of the site (Article 6(1)(f) of the UK GDPR), and, where required, your consent under Article 6(1)(a).
Updates
We revise this policy if the law or the service changes. The version published on this site is the one that applies.