Controller under the UK GDPR
The controller for the data processed at https://steamyvibe.uk is the private, non-commercial operator of the site. That individual determines the means and purposes of processing under the UK GDPR and the Data Protection Act 2018. Contact is through the form on this site.
How your data is protected
Data is sent over an encrypted (HTTPS) connection. Access is limited to those who need it, and suitable technical and organisational measures protect against loss, alteration or unauthorised access.
How long data is kept
Data is retained no longer than the purpose requires. Server logs are deleted promptly and form data once the request is dealt with, save where the law requires it to be kept longer.
Cookies and local storage
Only cookies needed for the site to work are used. Under the Privacy and Electronic Communications Regulations (PECR), advertising or analytics cookies are set only with your consent, and you can withdraw that consent at any time. You can also refuse cookies through your browser settings.
How to complain
If something about your data worries you, please raise it first through the site's contact form. You may also complain to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority, at ico.org.uk.
Updates
This policy is updated when the law or the service changes. The version published on this site is the one that applies.
Why your data is processed
The processing serves to provide the site, keep it secure and answer your messages. The lawful basis is legitimate interest in the secure operation of the site (Article 6(1)(f) of the UK GDPR), together with your consent where required (Article 6(1)(a)). We never sell or rent your data.
Data we collect
We collect only the data necessary to handle your request. Sensitive data is not collected.
- Identity: the name you provide.
- Contact: your email address and, where you wish, a phone number.
- Area: the town or postcode you provide.
- Request: what you tell us in your message.
- Technical data: IP address, date and time of the request.
Access data
On each visit, technical data is logged automatically such as your IP address, a timestamp, the page requested and your browser type. It keeps the service secure and is deleted after a short period.
Recipients
Your data is not sold or passed on for marketing. The host, 20i Limited, acts as a processor on our instructions under Article 28 of the UK GDPR, and does not use your data for its own purposes. Data is otherwise disclosed only where the law requires.
Where your data is held
Your data stays within the United Kingdom and is not transferred abroad. Should such a transfer ever be needed, it would be protected by the safeguards required under Chapter V of the UK GDPR, such as an adequacy decision or an International Data Transfer Agreement.
Your rights
Under the UK GDPR and the Data Protection Act 2018, you have the following rights over your data:
- Right of access: obtain your data.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask for your data to be deleted.
- Right to restriction: restrict processing.
- Objection: object to how your data is used.
- Right to data portability: receive your data in a reusable format.
- Withdraw consent: whenever processing is based on consent.