Data controller
The controller for the data processed at https://naughtytonight.uk is the private, non-commercial operator of the site. That individual determines the means and purposes of processing under the UK GDPR and the Data Protection Act 2018. Contact is through the site's form.
Retention
Personal data is kept only for as long as it is needed for the purpose it was collected for. Access logs are erased shortly after collection, and form data once your enquiry is handled, unless a legal obligation requires longer retention.
Updates
We revise this policy if the law or the service changes. The current version here is the one in force.
Your rights
Under the UK GDPR and the Data Protection Act 2018, you have the following rights over your data:
- Access: obtain your data.
- Rectification: correct inaccurate or incomplete data.
- Right to erasure: ask for your data to be deleted.
- Right to restriction: limit how your data is used.
- Objection: object to how your data is used.
- Right to data portability: receive your data in a reusable format.
- Withdraw consent: at any time, where processing relies on consent.
You can use these rights through the contact form on this site. You may also complain to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority, at ico.org.uk.
Recipients
For the technical running of the site, a hosting provider processes data solely on our instructions. The host, Fasthosts Internet Limited, acts as a processor under Article 28 of the UK GDPR. No other processors are used. Your data is not sold or passed on for marketing.
Cookies and local storage
Only cookies needed for the site to work are used. Under the Privacy and Electronic Communications Regulations (PECR), advertising or analytics cookies are set only with your consent, which you can withdraw at any time. Your browser settings also let you refuse cookies.
Log files
On each visit, technical data is logged automatically such as your IP address, a timestamp, the page requested and your browser type. It supports security and is erased after a short time.
Purposes and lawful bases
The processing serves to provide the site, keep it secure and answer your messages. Processing rests on legitimate interest under Article 6(1)(f) of the UK GDPR, and, where required, your consent under Article 6(1)(a).