Data controller
The controller for the data processed at https://cheekyspark.uk is the private individual who operates the site on a non-commercial basis. That individual determines the means and purposes of processing under the UK GDPR and the Data Protection Act 2018. You can get in touch through the site's contact form.
Server logs
When you visit the site, the server automatically records technical data such as your IP address, a timestamp, the page requested and your browser type. It supports security and is erased after a short time.
Your rights
Under the UK GDPR and the Data Protection Act 2018, you have the following rights over your data:
- Right of access: a copy of the data held about you.
- Right to rectification: correct inaccurate or incomplete data.
- Erasure: ask for your data to be deleted.
- Restriction: restrict processing.
- Objection: object to how your data is used.
- Right to data portability: obtain your data in a portable form.
- Withdraw consent: whenever processing is based on consent.
You can use these rights through the contact form on this site. If you are not satisfied, you have the right to complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.
Cookies and local storage
This site sets only strictly necessary cookies. Advertising or analytics cookies are set only with your consent, as required by PECR, which you can withdraw at any time. Your browser settings also let you refuse cookies.
Purposes and lawful bases
We process data to run the site securely and reply to your enquiries. The lawful basis is legitimate interest in the secure operation of the site (Article 6(1)(f) of the UK GDPR), and, where required, your consent under Article 6(1)(a).
Data processors
For the technical running of the site, a hosting provider processes data solely on our instructions. The host, Kualo Limited, acts as a processor under Article 28 of the UK GDPR. Beyond this, no further processors are engaged. Your data is not sold or passed on for marketing.
Deletion
Personal data is kept only for as long as it is needed for the purpose it was collected for. Server logs are deleted promptly and form data once the request is dealt with, save where the law requires it to be kept longer.
Changes to this policy
We revise this policy if the law or the service changes. The current version here is the one in force.