Controller under the UK GDPR
The controller for the data processed at https://flingflirt.uk is the private individual who operates the site on a non-commercial basis. Under the UK GDPR and the Data Protection Act 2018, that individual decides how and why your data is processed. Contact is through the form on this site.
Security
Your data travels over a secure, encrypted (HTTPS) connection. Access is limited to those who need it, and suitable technical and organisational measures protect against loss, alteration or unauthorised access.
Rights under the UK GDPR
The UK GDPR and the Data Protection Act 2018 give you the following rights:
- Right of access: a copy of the data held about you.
- Right to rectification: fix data that is wrong.
- Erasure: request deletion.
- Right to restriction: restrict processing.
- Objection: object to how your data is used.
- Right to data portability: receive your data in a reusable format.
- Right to withdraw consent: at any time, where processing relies on consent.
Data we collect
We collect only the data necessary to handle your request. No special category data, as defined by the UK GDPR, is requested.
- Identity: the name you provide.
- Contact details: an email address and, optionally, a telephone number.
- Location: the town or postcode you provide.
- Request: what you tell us in your message.
- Connection data: IP address, date and time of the request.
Purposes and lawful bases
The processing serves to provide the site, keep it secure and answer your messages. The lawful basis is legitimate interest in the secure operation of the site (Article 6(1)(f) of the UK GDPR), and, where required, your consent under Article 6(1)(a). We never sell or rent your data.
Cookies and local storage
This site sets only strictly necessary cookies. Advertising or analytics cookies are set only with your consent, as required by PECR, which you can withdraw at any time. You can also refuse cookies through your browser settings.
Recipients
Your data is not sold or passed on for marketing. The host, Kualo Limited, acts as a processor on our instructions under Article 28 of the UK GDPR, without using your data for its own ends. Data is otherwise disclosed only where the law requires.
Access data
On each visit, technical data is logged automatically such as your IP address, a timestamp, the page requested and your browser type. It keeps the service secure and is deleted after a short period.
Changes to this policy
This policy is updated when the law or the service changes. The version published on this site is the one that applies.
International transfers
Your data is not transferred outside the United Kingdom. If a transfer were ever necessary, it would be covered by the safeguards in Chapter V of the UK GDPR, for example an adequacy decision or an International Data Transfer Agreement.
Raising a concern
If you have a concern about how your data is handled, please contact us first through the site's contact form. You also have the right to complain to the Information Commissioner's Office (ICO), the supervisory authority for the United Kingdom, at ico.org.uk.
Retention
Data is retained no longer than the purpose requires. Access logs are erased shortly after collection, and form data once your enquiry is handled, save where the law requires it to be kept longer.